Login Request a demo
ME
Product
Memberpress
by Caseproof · last CVE Apr 22, 2025
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 1Medium 3Low 0
Severity
All severities5Critical1High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Memberpress to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-5031
6.4
0%
May 22
MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode
Affected: before 1.11.30
CVE-2024-1412
6.1
0%
Apr 9
Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error
Affected: before 1.11.27
CVE-2024-5025
5.4
0%
May 22
MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter
Affected: before 1.11.30
Showing 3