Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

MemberPress — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in MemberPress, with AI-generated Chinese analysis, references, and POCs.

Vendor: MemberPress

CVE IDTitleCVSSSeverityPublished
CVE-2025-39407 WordPress Memberpress plugin < 1.12.0 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2025-05-19
CVE-2024-11299 Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure CWE-200 5.3 Medium2025-04-22
CVE-2024-43956 WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerability CWE-862 6.5 Medium2024-11-01
CVE-2024-5024 MemberPress <= 1.11.29 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key Parameters CWE-79 6.1 Medium2024-08-30
CVE-2024-5025 MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter CWE-79 6.4 Medium2024-05-22
CVE-2024-5031 MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode CWE-918 8.5 High2024-05-22
CVE-2024-1412 Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error CWE-79 6.1 Medium2024-04-09

All 7 known CVE vulnerabilities affecting MemberPress with full Chinese analysis, references, and POCs where available.