WPCOM Member vulnerabilities
We track 1 vulnerability in WPCOM Member products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest WPCOM Member vulnerabilities
- 8.1 High severity
WPCOM Member: Improper Authentication
The WPCOM Member WordPress plugin before 1.8.3 does not limit or bind attempts to verify WeChat login codes, allowing unauthenticated attackers to brute-force a code issued to another user and log in as that user, including administrators, when WeChat official