What’s Vulnerable › Products

Memberpress vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Memberpress version is affected

Latest Memberpress vulnerabilities

• CVE-2026-92797 — Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter (CVSS 8.8)
• CVE-2025-39407 — WordPress Memberpress plugin < 1.12.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2024-11299 — Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure (CVSS 7.5)
• CVE-2024-43956 — WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerability (CVSS 9.8)
• CVE-2024-5031 — MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode (CVSS 6.4)
• CVE-2024-5025 — MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter (CVSS 5.4)
• CVE-2024-1412 — Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error (CVSS 6.1)