ME
Vendor
MemberPress
3
CVEs
0
On KEV
1
New 30D
Products
ME8.8
Memberpress
MemberPress
2 CVEs0 on KEV1 new
MC8.8
MemberPress Corporate Accounts
MemberPress
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-92797 New | ME Memberpress MemberPress | 8.8 | Oct 28 | Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter |
| CVE-2026-15451 | MC MemberPress Corporate Accounts MemberPress | 8.8 | Sep 12 | MemberPress Corporate Accounts <= 1.5.39 - Authenticated (Subscriber+) Privilege Escalation via Mass Assignment in Sub-Account Creation |
| CVE-2024-5024 | ME Memberpress Memberpress | 6.1 | Aug 30 | The Memberpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mepr_screenname' and 'mepr_key' parameter in all versions up to, and including,… |