CyberSecBulletin

Wpinsider-1 vulnerabilities

We track 2 vulnerabilities in Wpinsider-1 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 3, 2026.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Wpinsider-1 vulnerabilities

  • 7.5 High severity

    Simple Membership: Missing Authorization

    CVE-2026-97337Wpinsider-1

    The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and sensitive information disclosure in versions up to, and including, 4.8.3 via the resend-activation and email-activation endpoints. The endpoints are dispatched fr

  • 7.5 High severity

    Simple Membership: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2024-11088Wpinsider-1

    The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.5 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from po