Unknown Simple Membership vulnerabilities

CVEs per yearBy the year they were published

1. 20225
2. 20231
3. 20266

Newest CVEs

• CVE-2026-88785

  Simple Membership < 4.8.3 - Newly Registered Member Password Disclosure via URL Query String

  Unknown · Simple Membership

  Medium4.7
• CVE-2026-88764

  Simple Membership < 4.7.8 - Subscriber+ Membership Level Escalation via PayPal Standard subsc_ref

  Unknown · Simple Membership

  Medium5.4
• CVE-2026-14936

  Simple Membership < 4.7.7 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification

  Unknown · Simple Membership

  Medium5.3
• CVE-2026-15931

  Simple Membership < 4.7.8 - Unauthenticated Stored XSS via PayPal Subscription Subscriber Name

  Unknown · Simple Membership

  Medium6.1
• CVE-2026-15930

  Simple Membership < 4.7.8 - Unauthenticated Administrator Account Takeover via Registration Username Collision

  Unknown · Simple Membership

  Critical9.4
• CVE-2026-11855

  Simple Membership < 4.7.5 - Unauthenticated Stored XSS via Stripe Webhook API Version

  Unknown · Simple Membership

  High8.8
• CVE-2022-4469

  Simple Membership < 4.2.2 - Contributor+ Stored XSS

  Unknown · Simple Membership

  Medium5.4
• CVE-2022-2317

  Simple Membership < 4.1.3 - Unauthenticated Membership Privilege Escalation

  Unknown · Simple Membership

  Critical9.8
• CVE-2022-2273

  Simple Membership < 4.1.3 - Membership Privilege Escalation

  Unknown · Simple Membership

  High8.8
• CVE-2022-1724

  Simple Membership < 4.1.1 - Reflected Cross-Site Scripting

  Unknown · Simple Membership

  Medium6.1