wp.insider vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 20252
3. 202610

Newest CVEs

• CVE-2026-74000

  WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability

  wp.insider · Simple Membership

  Medium5.3
• CVE-2026-73358

  WordPress Affiliates Manager plugin <= 2.9.53 - Cross Site Scripting (XSS) vulnerability

  wp.insider · Affiliates Manager

  High7.1
• CVE-2026-73355

  WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability

  wp.insider · Affiliates Manager

  Critical9.3
• CVE-2026-66712

  WordPress Simple Membership plugin <= 4.7.8 - Broken Access Control vulnerability

  wp.insider · Simple Membership

  High7.5
• CVE-2026-57654

  WordPress Affiliates Manager plugin <= 2.9.49 - Broken Access Control vulnerability

  wp.insider · Affiliates Manager

  Medium6.5
• CVE-2026-52692

  WordPress Affiliates Manager plugin <= 2.9.50 - Sensitive Data Exposure vulnerability

  wp.insider · Affiliates Manager

  High7.5
• CVE-2026-42663

  WordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability

  wp.insider · Simple Membership

  Medium6.5
• CVE-2026-34886

  WordPress Simple Membership plugin <= 4.7.1 - Broken Access Control vulnerability

  wp.insider · Simple Membership

  High7.5
• CVE-2026-25308

  WordPress Simple Membership plugin <= 4.6.9 - Broken Access Control vulnerability

  wp.insider · Simple Membership

  Medium4.3
• CVE-2026-24986

  WordPress Simple Membership WP user Import plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability

  wp.insider · Simple Membership WP user Import

  Medium5.4