MemberPress Memberpress vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 20251
3. 20261

Newest CVEs

• CVE-2026-92797

  Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter

  MemberPress · Memberpress

  High8.8
• CVE-2024-11299

  Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure

  MemberPress · Memberpress

  Medium5.3
• CVE-2024-5024

  MemberPress <= 1.11.29 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key Parameters

  MemberPress · Memberpress

  Medium6.1
• CVE-2024-5025

  MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter

  MemberPress · Memberpress

  Medium6.4
• CVE-2024-5031

  MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode

  MemberPress · Memberpress

  High8.5
• CVE-2024-1412

  Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error

  MemberPress · Memberpress

  Medium6.1