Skip to content
OpenAdvisories

Product · wp.insider

Simple Membership

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-74000

    WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability

    Contributor Broken Access Control in Simple Membership <= 4.8.2 versions.

    wp.insider Simple Membership
  • Medium 6.5
    CVE-2026-42663

    WordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions.

    wp.insider Simple Membership
  • Medium 4.3
    CVE-2026-25308

    WordPress Simple Membership plugin <= 4.6.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in wp.insider Simple Membership simple-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Membership: from n/a through <= 4.6.9.

    wp.insider Simple Membership
  • Medium 5.9
    CVE-2025-49333

    WordPress Simple Membership plugin <= 4.6.3 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wp.insider Simple Membership simple-membership allows Stored XSS.This issue affects Simple Membership: from n/a through <= 4.6.3.

    wp.insider Simple Membership
  • Medium 4.7
    CVE-2024-49682

    WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership simple-membership allows Phishing.This issue affects Simple Membership: from n/a through <= 4.5.3.

    wp.insider Simple Membership