Wp.insider 14 CVEs across 5 Wp.insider products. Browse Wp.insider vulnerabilities, severities, and proof-of-concept exploits.
Wp.insider products with known CVEs Wp.insider CVEs — newest first CVE Severity Score Published Summary CVE-2026-74000Medium 5.32026-09-17 Contributor Broken Access Control in Simple Membership <= 4.8.2 versions. CVE-2026-73358High 7.12026-08-18 Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions. CVE-2026-73355Critical 9.32026-08-18 Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions. CVE-2026-66712High 7.52026-08-06 Unauthenticated Broken Access Control in Simple Membership <= 4.7.8 versions. CVE-2026-57654Medium 6.52026-06-26 Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions. CVE-2026-52692High 7.52026-06-15 Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions. CVE-2026-42663Medium 6.52026-06-15 Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions. CVE-2026-34886High 7.52026-06-15 Unauthenticated Broken Access Control in Simple Membership <= 4.7.1 versions. CVE-2026-25308Medium 4.32026-02-19 Missing Authorization vulnerability in wp.insider Simple Membership simple-membership allows Exploiting Incorrectly Configured Access Control Security Levels.T… CVE-2026-24986Medium 5.42026-02-03 Cross-Site Request Forgery (CSRF) vulnerability in wp.insider Simple Membership WP user Import simple-membership-wp-user-import allows Cross Site Request Forge… CVE-2025-49333Medium 5.92025-06-06 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wp.insider Simple Membership simple-membership allows Sto… CVE-2025-24660High 7.12025-02-03 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wp.insider Simple Membership Custom Messages simple-membe… CVE-2024-49682Medium 4.72024-10-24 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership simple-membership allows Phishing.This issue affects Simple M… CVE-2024-47354Medium 4.72024-10-10 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership After Login Redirection simple-membership-after-login-redirec…