WPCOM Member 产品相关 7 条漏洞，AI 中文标题与摘要、CVSS、POC 一站汇总。
ベンダー: whyun
| CVE ID | タイトル | CVSS | 深刻度 | 公開日 |
|---|---|---|---|---|
| CVE-2025-14002 | WPCOM Member <= 1.7.16 - Authentication Bypass via Weak OTP CWE-287 | 8.1 | High | 2025-12-16 |
| CVE-2025-11920 | WPCOM Member <= 1.7.14 - Authenticated (Contributor+) Local File Inclusion via Shortcode CWE-98 | 8.8 | High | 2025-11-01 |
| CVE-2025-39570 | WordPress WPCOM Member plugin <= 1.7.7 - Local File Inclusion Vulnerability CWE-98 | 8.8 | High | 2025-04-16 |
| CVE-2025-2221 | WPCOM Member <= 1.7.6 - Unauthenticated Time-Based SQL Injection CWE-89 | 7.5 | High | 2025-03-14 |
| CVE-2025-1475 | WPCOM Member <= 1.7.5 - Authentication Bypass via 'user_phone' CWE-287 | 9.8 | Critical | 2025-03-07 |
| CVE-2024-47378 | WordPress WPCOM Member plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 | 7.1 | High | 2024-10-05 |
| CVE-2024-7493 | WPCOM Member <= 1.5.2.1 - Unauthenticated Privilege Escalation via User Meta CWE-269 | 9.8 | Critical | 2024-09-06 |
WPCOM Member 产品累计公开 7 条 CVE 漏洞，本页提供按时间倒序的完整列表，包含 CVSS、CWE、AI 中文摘要与可获取的 POC 链接。