Description
Unauthenticated SQL Injection in WP eMember < v10.9.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tips and Tricks HQ | WP eMember | < v10.9.4 | v10.9.4 |
Critical · 9.3
CVE-2026-54811
EUVD-2026-37644GHSA-mpj9-wf83-g8qm
WordPress WP eMember plugin < v10.9.4 - SQL Injection vulnerability
Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack