Whyun

6 CVEs in 1 Whyun product, including Wpcom Member. Newest: CVE-2026-104803 (2026-10-10). Severity, EPSS and public exploits for each.

Whyun products with known CVEs

ProductCVEs
Wpcom Member6
Whyun CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-104803Critical9.82026-10-10The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the `uuid` and `code` parameters…
CVE-2025-14002High8.12025-12-16The WPCOM Member plugin for WordPress is vulnerable to authentication bypass via brute force in all versions up to, and including, 1.7.16. This is due to weak…
CVE-2025-11920High8.82025-11-01The WPCOM Member plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7.14 via the action parameter in one of its…
CVE-2025-2221High7.52025-03-14The WPCOM Member plugin for WordPress is vulnerable to time-based SQL Injection via the ‘user_phone’ parameter in all versions up to, and including, 1.7.6 due…
CVE-2025-1475Critical9.82025-03-07The WPCOM Member plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.7.5. This is due to insufficient verificat…
CVE-2024-7493Critical9.82024-09-06The WPCOM Member plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.5.2.1. This is due to the plugin allowing a…