LiquidWeb vulnerabilities
We track 3 vulnerabilities in LiquidWeb products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 22, 2026.
Latest LiquidWeb vulnerabilities
- 9.8 Critical severity
Give Tributes: Deserialization of Untrusted Data
The Give Tributes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.1 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is
- 7.5 High severity
Membership Plugin – Restrict Content: Authorization Bypass Through User-Controlled Key
The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 3.2.16 via the 'rcp_stripe_create_setup_intent_for_saved_card' function due to missing capability check. Additionally, t
- 7.5 High severity
Membership Plugin – Restrict Content: Exposure of Sensitive Information to an Unauthorized Actor
The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.13 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract se