Simple Membership vulnerabilities

2 known vulnerabilities in Simple Membership from Wpinsider-1. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Simple Membership: Missing Authorization

  CVE-2026-97337Oct 3, 2026Wpinsider-1

  The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and sensitive information disclosure in versions up to, and including, 4.8.3 via the resend-activation and email-activation endpoints. The endpoints are dispatched fr

• 7.5 High severity

  Simple Membership: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-11088Nov 21, 2024Wpinsider-1

  The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.5 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from po