MemberPress vulnerabilities
7 published CVEs name MemberPress among the affected products.
- Published CVEs
- 7
- Last 12 months
- 2
- Critical
- 0
- Known exploited
- 0
Critical 0High 3Medium 4Low 0Not scored 0
CVEs per yearBy the year they were published
- 20244
- 20251
- 20262
Newest CVEs
- CVE-2026-92797
Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter
MemberPress · Memberpress
High8.8 - CVE-2026-15451
MemberPress Corporate Accounts <= 1.5.39 - Authenticated (Subscriber+) Privilege Escalation via Mass Assignment in Sub-Account Creation
MemberPress · MemberPress Corporate Accounts
High8.8 - CVE-2024-11299
Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
MemberPress · Memberpress
Medium5.3 - CVE-2024-5024
MemberPress <= 1.11.29 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key Parameters
MemberPress · Memberpress
Medium6.1 - CVE-2024-5025
MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter
MemberPress · Memberpress
Medium6.4 - CVE-2024-5031
MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode
MemberPress · Memberpress
High8.5 - CVE-2024-1412
Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error
MemberPress · Memberpress
Medium6.1