Wp.Insider vulnerabilities
14 vulnerabilities
Known vulnerabilities in Wp.Insider products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.
Products
5- Simple Membership7 vulnerabilities
- Affiliates Manager4 vulnerabilities
- Simple Membership After Login Redirection1 vulnerabilities
- Simple Membership Custom Messages1 vulnerabilities
- Simple Membership WP User Import1 vulnerabilities
CVE-2025-24660wordpresssimple-membership-custom-messages+1
EPSS score0.32%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wp.insider Simple Membership Custom Messages simple-membership-custom-messages allows Reflected XSS.This issue affects Simple Membership Custom Messages: from n/a through <= 2.4.CVE-2025-49333wordpresssimple-membership+1EPSS score0.21%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wp.insider Simple Membership simple-membership allows Stored XSS.This issue affects Simple Membership: from n/a through <= 4.6.3.CVE-2024-47354wordpresssimple-membership-after-login-redirection+1EPSS score0.33%
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership After Login Redirection simple-membership-after-login-redirection.This issue affects Simple Membership After Login Redirection: from n/a through <= 1.6.CVE-2024-49682simple-membership-pluginsimple_membership+2EPSS score0.27%
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership simple-membership allows Phishing.This issue affects Simple Membership: from n/a through <= 4.5.3.CVE-2026-74000wordpresssimple-membership+1EPSS score0.29%
Contributor Broken Access Control in Simple Membership <= 4.8.2 versions.CVE-2026-73355wordpressaffiliates-manager+1EPSS score0.40%
Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.CVE-2026-73358wordpressaffiliates-manager+1EPSS score0.25%
Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.CVE-2026-52692wordpressaffiliates-manager+1EPSS score0.42%
Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions.CVE-2026-42663wordpresssimple-membership+1EPSS score0.22%
Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions.CVE-2026-25308wordpresssimple-membership+1EPSS score0.21%
Missing Authorization vulnerability in wp.insider Simple Membership simple-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Membership: from n/a through <= 4.6.9.CVE-2026-66712wordpresssimple-membership+1EPSS score0.35%
Unauthenticated Broken Access Control in Simple Membership <= 4.7.8 versions.CVE-2026-57654wordpressaffiliates-manager+1EPSS score0.30%
Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions.CVE-2026-24986wordpresssimple-membership-wp-user-import+1EPSS score0.11%
Cross-Site Request Forgery (CSRF) vulnerability in wp.insider Simple Membership WP user Import simple-membership-wp-user-import allows Cross Site Request Forgery.This issue affects Simple Membership WP user Import: from n/a through <= 1.9.1.CVE-2026-34886wordpresssimple-membership+1EPSS score0.35%
Unauthenticated Broken Access Control in Simple Membership <= 4.7.1 versions.