wp.insider vulnerabilities and threats

15 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.3%	CVE-2026-74000Simple Membership (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2026-09-17CVE Database V5CVE-2026-74000 Contributor Broken Access Control in Simple Membership <= 4.8.2 versions. EPSS 0.3%Vulnerability wp.insider CWE-862	CVE Database V5	2026-09-17
High	7.1	EPSS 0.3%	CVE-2026-73358Affiliates Manager (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2026-08-18CVE Database V5CVE-2026-73358 Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions. EPSS 0.3%Vulnerability wp.insider CWE-79	CVE Database V5	2026-08-18
Critical	9.3	EPSS 0.4%	CVE-2026-73355Affiliates Manager (WordPress plugin) · SQL Injection Critical9.3EPSS 0.4%2026-08-18CVE Database V5CVE-2026-73355 Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions. EPSS 0.4%Vulnerability wp.insider CWE-89	CVE Database V5	2026-08-18
High	7.5	EPSS 0.3%	CVE-2026-66712Simple Membership (WordPress plugin) · Missing Authorization High7.5EPSS 0.3%2026-08-06CVE Database V5CVE-2026-66712 CVE-2026-66712 is a high-severity vulnerability in the Simple Membership plugin by wp.insider, affecting versions up to and including 4.7.8. It involves unauthenticated broken access control (CWE-862), allowing unauthorized users to perform actions that should require authorization. The vulnerability has a CVSS score of 7.5, indicating a significant impact on integrity without affecting confidentiality or availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time. EPSS 0.3%Vulnerability wp.insider CWE-862 #ghsa-526w-8v5p-prpw	CVE Database V5	2026-08-06
Medium	6.5	EPSS 0.3%	CVE-2026-57654Affiliates Manager (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2026-06-26CVE Database V5CVE-2026-57654 Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions. EPSS 0.3%Vulnerability wp.insider CWE-862	CVE Database V5	2026-06-26
High	7.5	EPSS 0.2%	CVE-2026-52692Affiliates Manager (WordPress plugin) · Insertion of Sensitive Information Into Sent Data High7.5EPSS 0.2%2026-06-15CVE Database V5CVE-2026-52692 Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions. EPSS 0.2%Vulnerability wp.insider CWE-201	CVE Database V5	2026-06-15
Medium	6.5	EPSS 0.2%	CVE-2026-42663Simple Membership (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-06-15CVE Database V5CVE-2026-42663 CVE-2026-42663 is a medium severity vulnerability in the Simple Membership plugin by wp.insider, affecting versions up to and including 4.7.2. It allows unauthenticated attackers to perform Cross-Site Scripting (XSS) attacks due to improper neutralization of input during web page generation. This vulnerability can lead to partial confidentiality, integrity, and availability impacts. No official patch or remediation guidance is currently provided by the vendor. EPSS 0.2%Vulnerability wp.insider CWE-79	CVE Database V5	2026-06-15
High	7.5	EPSS 0.3%	CVE-2026-34886Simple Membership (WordPress plugin) · Missing Authorization High7.5EPSS 0.3%2026-06-15CVE Database V5CVE-2026-34886 Unauthenticated Broken Access Control in Simple Membership <= 4.7.1 versions. EPSS 0.3%Vulnerability wp.insider CWE-862	CVE Database V5	2026-06-15
Medium	4.3	EPSS 0.2%	CVE-2026-25308Simple Membership (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2026-02-19CVE Database V5CVE-2026-25308 Missing Authorization vulnerability in wp.insider Simple Membership simple-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Membership: from n/a through <= 4.6.9. EPSS 0.2%Vulnerability wp.insider	CVE Database V5	2026-02-19
Medium	5.4	EPSS 0.1%	CVE-2026-24986wp.insider Simple Membership WP user Import · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.1%2026-02-03CVE Database V5CVE-2026-24986 Cross-Site Request Forgery (CSRF) vulnerability in wp.insider Simple Membership WP user Import simple-membership-wp-user-import allows Cross Site Request Forgery.This issue affects Simple Membership WP user Import: from n/a through <= 1.9.1. EPSS 0.1%Vulnerability	CVE Database V5	2026-02-03
Medium	5.9	EPSS 0.2%	CVE-2025-49333Simple Membership (WordPress plugin) · Cross-site Scripting Medium5.9EPSS 0.2%2025-06-06CVE Database V5CVE-2025-49333 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wp.insider Simple Membership simple-membership allows Stored XSS.This issue affects Simple Membership: from n/a through <= 4.6.3. EPSS 0.2%Vulnerability wp.insider	CVE Database V5	2025-06-06
High	7.1	EPSS 0.3%	CVE-2025-24660Simple Membership Custom Messages (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-02-03CVE Database V5CVE-2025-24660 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wp.insider Simple Membership Custom Messages simple-membership-custom-messages allows Reflected XSS.This issue affects Simple Membership Custom Messages: from n/a through <= 2.4. EPSS 0.3%Vulnerability wp.insider	CVE Database V5	2025-02-03
Medium	4.7	EPSS 0.3%	CVE-2024-49682Simple Membership (WordPress plugin) · Open Redirect Medium4.7EPSS 0.3%2024-10-24CVE Database V5CVE-2024-49682 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership simple-membership allows Phishing.This issue affects Simple Membership: from n/a through <= 4.5.3. EPSS 0.3%Vulnerability wp.insider	CVE Database V5	2024-10-24
Medium	4.7	EPSS 0.3%	CVE-2024-47354Simple Membership After Login Redirection (WordPress plugin) · Open Redirect Medium4.7EPSS 0.3%2024-10-10CVE Database V5CVE-2024-47354 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership After Login Redirection simple-membership-after-login-redirection.This issue affects Simple Membership After Login Redirection: from n/a through <= 1.6. EPSS 0.3%Vulnerability wp.insider	CVE Database V5	2024-10-10
Low	3.4	EPSS 0.3%	CVE-2024-22308Simple Membership (WordPress plugin) · Open Redirect Low3.4EPSS 0.3%2024-01-24CVE Database V5CVE-2024-22308 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in smp7, wp.Insider Simple Membership.This issue affects Simple Membership: from n/a through 4.4.1. EPSS 0.3%Vulnerability smp7, wp.insider CWE-601	CVE Database V5	2024-01-24

Page 1 of 1