Wp.Insider Simple Membership vulnerabilities

7 vulnerabilities

Known vulnerabilities in Wp.Insider Simple Membership, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.9CVE-2025-49333wordpresssimple-membership+1
EPSS score
0.21%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wp.insider Simple Membership simple-membership allows Stored XSS.This issue affects Simple Membership: from n/a through <= 4.6.3.6.1CVE-2024-49682simple-membership-pluginsimple_membership+2
EPSS score
0.27%
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership simple-membership allows Phishing.This issue affects Simple Membership: from n/a through <= 4.5.3.5.3CVE-2026-74000wordpresssimple-membership+1
EPSS score
0.29%
Contributor Broken Access Control in Simple Membership <= 4.8.2 versions.7.2CVE-2026-42663wordpresssimple-membership+1
EPSS score
0.22%
Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions.4.3CVE-2026-25308wordpresssimple-membership+1
EPSS score
0.21%
Missing Authorization vulnerability in wp.insider Simple Membership simple-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Membership: from n/a through <= 4.6.9.7.5CVE-2026-66712wordpresssimple-membership+1
EPSS score
0.35%
Unauthenticated Broken Access Control in Simple Membership <= 4.7.8 versions.7.5CVE-2026-34886wordpresssimple-membership+1
EPSS score
0.35%
Unauthenticated Broken Access Control in Simple Membership <= 4.7.1 versions.