Memberhero vulnerabilities

2 known vulnerabilities in Memberhero from Najeebmedia. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Simple User Registration: Improper Privilege Management

  CVE-2025-4334Jun 26, 2025NmediaEPSS 2.59%

  The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible for

• 9.8 Critical severity

  Simple User Registration: Missing Authentication for Critical Functionality

  CVE-2024-49604Oct 20, 2024N-Media

  Authentication Bypass Using an Alternate Path or Channel vulnerability in N-Media Simple User Registration wp-registration allows Authentication Bypass.This issue affects Simple User Registration: from n/a through <= 6.7.