wpinsider-1 vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20246
3. 20265

Newest CVEs

• CVE-2026-103427

  Simple Membership <= 4.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Country Field

  wpinsider-1 · Simple Membership

  Medium6.4
• CVE-2026-97337

  Simple Membership <= 4.8.3 - Missing Authorization to Unauthenticated Account Takeover and Sensitive Information Disclosure via 'email' Parameter on Activation Endpoints

  wpinsider-1 · Simple Membership

  High7.5
• CVE-2026-77194

  Simple Membership <= 4.8.1 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding

  wpinsider-1 · Simple Membership

  Medium5.3
• CVE-2026-12093

  Simple Membership <= 4.7.5 - Missing Authorization to Unauthenticated Arbitrary Member Account Deactivation via Forged Stripe 'charge.refunded' Webhook

  wpinsider-1 · Simple Membership

  Medium5.3
• CVE-2026-1461

  Simple Membership <= 4.7.0 - Unauthenticated Improper Handling of Missing Values

  wpinsider-1 · Simple Membership

  Medium6.5
• CVE-2024-11088

  Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor

  wpinsider-1 · Simple Membership

  Medium5.3
• CVE-2024-4383

  Simple Membership <= 4.4.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

  wpinsider-1 · Simple Membership

  Medium6.4
• CVE-2024-3730

  Simple Membership <= 4.4.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

  wpinsider-1 · Simple Membership

  Medium5.4
• CVE-2024-1985

  Simple Membership <= 4.4.2 - Unauthenticated Stored Self-Based Cross-Site Scripting

  wpinsider-1 · Simple Membership

  Medium4.7
• CVE-2024-0859

  Affiliates Manager <= 2.9.34 - Cross-Site Request Forgery

  wpinsider-1 · Affiliates Manager

  Medium4.3