Description
Unauthenticated Broken Access Control in Simple Membership <= 4.7.8 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| wp.insider | Simple Membership | ≤ 4.7.8 | — |
High · 7.5
CVE-2026-66712
EUVD-2026-53937GHSA-526w-8v5p-prpw
WordPress Simple Membership plugin <= 4.7.8 - Broken Access Control vulnerability
Published Aug 6, 2026 · Updated Aug 6, 2026 · Assigned by Patchstack