Wpinsider-1

11 CVEs across 3 Wpinsider-1 products. Browse Wpinsider-1 vulnerabilities, severities, and proof-of-concept exploits.

Wpinsider-1 products with known CVEs

ProductCVEs
Simple Membership9
Affiliates Manager1
Simple Membership Wp User Import1
Wpinsider-1 CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-77194Medium5.32026-09-01The Simple Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in versions up to, and including, 4…
CVE-2026-12093Medium5.32026-06-18The Simple Membership plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.7.5. This is due to the plugin not pro…
CVE-2026-1461Medium6.52026-02-19The Simple Membership plugin for WordPress is vulnerable to Improper Handling of Missing Values in all versions up to, and including, 4.7.0 via the Stripe webh…
CVE-2024-11088Medium5.32024-11-21The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.5 via the WordPress core s…
CVE-2024-4383Medium6.42024-05-14The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swpm_paypal_subscription_cancel_link' shortcode in al…
CVE-2024-3730Medium5.42024-04-25The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swpm_paypal_subscription_cancel_link' shortcode in al…
CVE-2024-1985Medium4.72024-03-13The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Display Name' parameter in all versions up to, and including…
CVE-2024-0859Medium4.32024-02-05The Affiliates Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9.34. This is due to missing or…
CVE-2023-6882Medium6.12024-01-11The Simple Membership plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘environment_mode’ parameter in all versions up to, and incl…
CVE-2023-4719High7.22023-09-06The Simple Membership plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `list_type` parameter in versions up to, and including, 4.3…
CVE-2023-0254High7.22023-01-12The Simple Membership WP user Import plugin for WordPress is vulnerable to SQL Injection via the ‘orderby’ parameter in versions up to, and including, 1.7 due…