Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-104401 EUVD-2026-92290GHSA-vjwf-8fv5-9q2x

WordPress Memberful - Membership Plugin plugin <= 1.81.2 - Sensitive Data Exposure vulnerability

Published Oct 5, 2026 · Updated Oct 5, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Retrieve Embedded Sensitive Data.This issue affects Memberful - Membership Plugin: from n/a through 1.81.2.

Affected products

VendorProductAffectedFixed
Memberful Memberful - Membership Plugin ≤ 1.81.2 —

References