What’s Vulnerable › Products

wp-eMember vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your wp-eMember version is affected

Latest wp-eMember vulnerabilities

• CVE-2026-54811 — WordPress WP eMember plugin < v10.9.4 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2026-49077 — WordPress WP eMember plugin <= v10.2.2 - Sensitive Data Exposure vulnerability (CVSS 5.3)
• CVE-2026-28073 — WordPress WP eMember theme <= v10.2.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-28070 — WordPress WP eMember plugin <= v10.2.2 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2024-5081 — WP eMember <= v10.7.0 - Stored XSS via CSRF (CVSS 6.1)
• CVE-2024-5744 — WP eMember < 10.6.7 - Reflected XSS (CVSS 6.8)
• CVE-2024-5715 — WP eMember < 10.6.7 - Reflected XSS via Member Edit (CVSS 7.1)
• CVE-2024-5080 — WP eMember < 10.6.6 - Admin+ Arbitrary File Upload (CVSS 8.8)
• CVE-2024-5079 — WP eMember < 10.6.7 - Unauthenticated Stored XSS via Member Registration (CVSS 6.1)
• CVE-2024-5077 — WP eMember < 10.6.6 - Stored XSS in Blacklist via CSRF (CVSS 6.8)
• CVE-2024-5076 — WP eMember < 10.6.6 - Bulk Delete via CSRF (CVSS 8.8)
• CVE-2024-5075 — WP eMember < 10.6.6 - Reflected XSS (CVSS 5.9)
• CVE-2024-5074 — WP eMember < 10.6.6 - Reflected XSS (CVSS 5.4)
• CVE-2024-4749 — WP eMember < 10.3.9 - Reflected XSS (CVSS 8.3)