WP eMember vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WE

Product

WP eMember

by Tips and Tricks HQ · last CVE Jun 17, 2026

6

CVEs

0

On KEV

9.3

Max CVSS

0

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 1High 1Medium 4Low 0

Severity

All severities6 Critical1 High1 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add WP eMember to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-54811	9.3	0%	Jun 17	WordPress WP eMember plugin < v10.9.4 - SQL Injection vulnerability Affected: before v10.9.4
CVE-2026-28073	7.1	0%	Mar 19	WordPress WP eMember theme <= v10.2.2 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through v10.2.2
CVE-2024-5744	6.8	0%	Jul 13	WP eMember < 10.6.7 - Reflected XSS Affected: before 10.6.7
CVE-2024-5077	6.8	0%	Jul 13	WP eMember < 10.6.6 - Stored XSS in Blacklist via CSRF Affected: before 10.6.6
CVE-2026-49077	5.3	0%	Jun 4	WordPress WP eMember plugin <= v10.2.2 - Sensitive Data Exposure vulnerability Affected: through v10.2.2
CVE-2026-28070	5.3	0%	Mar 19	WordPress WP eMember plugin <= v10.2.2 - Broken Access Control vulnerability Affected: through v10.2.2