Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

WP-Members Membership Plugin — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in WP-Members Membership Plugin, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerabilities for the WP-Members Membership Plugin, identifying it as a WordPress product with specific security weaknesses. It collects a diverse range of defects, including cross-site scripting, SQL injection, and privilege escalation issues, covering advisories published over the past decade. Readers can track the vendor's security advisories, analyze the frequency of specific weakness classes, and review the product's complete vulnerability history. The collection serves as a centralized reference for understanding how the plugin's security posture has evolved, allowing users to identify patterns in reported flaws without needing to search individual database entries. This aggregation facilitates a clear view of the plugin's risk profile, helping administrators make informed decisions about updates or mitigation strategies based on historical data rather than isolated incidents.

Vendor: cbutlerjr

CVE ID Title CVSS Severity Published
CVE-2026-84960 WP-Members Membership Plugin <= 3.5.6 - Reflected Cross-Site Scripting CWE-79 6.1 Medium 2026-09-11
CVE-2026-2363 WP-Members Membership Plugin <= 3.5.5.1 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute CWE-89 6.5 Medium 2026-03-04
CVE-2025-14448 WP-Members Membership Plugin <= 3.5.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Checkbox and Multiple Select User Profile Fields CWE-79 5.4 Medium 2026-01-15
CVE-2025-12648 WP-Members Membership Plugin <= 3.5.4.4 - Unauthenticated Information Exposure via Unprotected Files CWE-552 5.3 Medium 2026-01-07
CVE-2025-9489 WP-Members Membership Plugin <= 3.5.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Profile Names CWE-94 5.0 Medium 2025-09-09
CVE-2025-7495 WP-Members <= 3.5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2025-07-22
CVE-2025-4610 WP-Members <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_user_memberships Shortcode CWE-79 6.4 Medium 2025-05-17
CVE-2024-10374 WP-Members <= 3.4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_loginout Shortcode CWE-79 6.4 Medium 2024-10-25
CVE-2024-9231 WP-Members Membership Plugin <= 3.4.9.5 - Reflected Cross-Site Scripting CWE-79 6.1 Medium 2024-10-22
CVE-2024-2920 WP-Members Membership Plugin <= 3.4.9.3 - Unprotected Storage of Potentially Sensitive Files CWE-200 5.3 Medium 2024-04-26
CVE-2024-1852 WP-Members Membership Plugin <= 3.4.9.2 - Unauthenticated Stored Cross-Site Scripting CWE-79 7.2 High 2024-04-09
CVE-2024-1987 WP-Members Membership Plugin <= 3.4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium 2024-03-08
CVE-2023-6733 WP-Members Membership Plugin <= 3.4.8 - Missing Authorization to Sensitive Information Exposure CWE-284 6.5 Medium 2024-01-04
CVE-2023-2869 WP-Members Membership <= 3.4.7.3 - Missing Authorization to Settings Update CWE-862 4.3 Medium 2023-07-12

All 14 known CVE vulnerabilities affecting WP-Members Membership Plugin with full Chinese analysis, references, and POCs where available.