memberpress

WordPress · Plugin

8 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' ParameterCVE-2026-92797	memberpress	WordPress	High	Fix reported	2026-10-28
Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and errorCVE-2024-1412	memberpress	WordPress	Medium	Fix reported	2026-05-20
Memberpress < 1.12.0 - Reflected Cross-Site ScriptingCVE-2025-39407	memberpress	WordPress	Medium	Fix reported	2025-08-15
Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information ExposureCVE-2024-11299	memberpress	WordPress	Medium	Fix reported	2025-04-22
Memberpress <= 1.11.34 - Missing AuthorizationCVE-2024-43956	memberpress	WordPress	Medium	Fix reported	2024-09-30
MemberPress <= 1.11.29 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key ParametersCVE-2024-5024	memberpress	WordPress	Medium	Fix reported	2024-08-30
MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist ParameterCVE-2024-5025	memberpress	WordPress	Medium	Fix reported	2024-05-22
MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file ShortcodeCVE-2024-5031	memberpress	WordPress	High	Fix reported	2024-05-22