Login Request a demo
ME
Product
Memberpress
by Caseproof · last CVE Apr 22, 2025
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 1Medium 3Low 0
Severity
All severities5Critical1High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Memberpress to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-43956
9.8
0%
Nov 1
WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerability
Affected: before 1.11.35
CVE-2024-11299
7.5
0%
Apr 22
Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Affected: through 1.11.37
CVE-2024-5031
6.4
0%
May 22
The Memberpress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.11.29 via the 'mepr-user-file' shortcode
Affected: before 1.11.30
CVE-2024-1412
6.1
0%
Apr 9
The Memberpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘message’ and 'error' parameters in all versions up to, and including, 1.11.26 due to…
Affected: before 1.11.27
CVE-2024-5025
5.4
0%
May 22
The Memberpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘arglist’ parameter in all versions up to, and including, 1.11.29 due to insufficient…
Affected: before 1.11.30
Showing 5