WP
Vendor
wpinsider-1
13
CVEs
0
On KEV
2
New 30D
Products
SM7.5
Simple Membership
wpinsider-1
11 CVEs0 on KEV2 new
AM4.3
Affiliates Manager
wpinsider-1
1 CVEs0 on KEV0 new
SM4.9
Simple Membership WP user Import
wpinsider-1
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103427 | SM Simple Membership wpinsider-1 | 6.4 | Oct 10 | Simple Membership <= 4.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Country Field |
| CVE-2026-97337 | SM Simple Membership wpinsider-1 | 7.5 | Oct 3 | Simple Membership <= 4.8.3 - Missing Authorization to Unauthenticated Account Takeover and Sensitive Information Disclosure via 'email' Parameter on Activation Endpoints |
| CVE-2026-77194 | SM Simple Membership wpinsider-1 | 5.3 | Sep 1 | Simple Membership <= 4.8.1 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding |
| CVE-2026-12093 | SM Simple Membership wpinsider-1 | 5.3 | Jun 18 | Simple Membership <= 4.7.5 - Missing Authorization to Unauthenticated Arbitrary Member Account Deactivation via Forged Stripe 'charge.refunded' Webhook |
| CVE-2026-1461 | SM Simple Membership wpinsider-1 | 6.5 | Feb 19 | Simple Membership <= 4.7.0 - Unauthenticated Improper Handling of Missing Values |
| CVE-2024-11088 | SM Simple Membership wpinsider-1 | 7.5 | Nov 21 | Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor |
| CVE-2024-4383 | SM Simple Membership wpinsider-1 | 5.4 | May 9 | Simple Membership <= 4.4.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2024-3730 | SM Simple Membership wpinsider-1 | 5.4 | Apr 25 | Simple Membership <= 4.4.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2024-1985 | SM Simple Membership wpinsider-1 | 6.1 | Mar 13 | Simple Membership <= 4.4.2 - Unauthenticated Stored Self-Based Cross-Site Scripting |
| CVE-2024-0859 | AM Affiliates Manager wpinsider-1 | 4.3 | Feb 5 | Affiliates Manager <= 2.9.34 - Cross-Site Request Forgery |
| CVE-2023-6882 | SM Simple Membership wpinsider-1 | 6.1 | Jan 11 | Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting Vulnerability via environment_mode |
| CVE-2023-4719 | SM Simple Membership wpinsider-1 | 6.1 | Sep 6 | Simple Membership <= 4.3.5 - Reflected Cross-Site Scripting |
| CVE-2023-0254 | SM Simple Membership WP user Import wpinsider-1 | 4.9 | Jan 12 | Simple Membership WP user Import <= 1.7 - Authenticated (Admin+) SQL Injection |