Description
Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| wp.insider | Simple Membership | ≤ 4.7.2 | — |
Medium · 6.5
CVE-2026-42663
EUVD-2026-36828GHSA-hc65-h82q-r825
WordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack