Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-08-12
Membership Plugin - Security Vulnerability (CVE-2026-9273)
The Membership Plugin – Kadence Memberships plugin for WordPress (formerly Restrict Content) is vulnerable to password reset link poisoning leading to account takeover in all versions up to, and including, 4.0.0. This is due to the legacy lost-password handler rc_process_lost_password_form() consuming the attacker-controlled rc_redirect POST parameter into two unvalidated sinks in legacy/includes/forms.php: wp_redirect( esc_url( $_POST['rc_redirect'] ) . ... ) at line 243, and add_query_arg( array( 'key' => $key, 'login' => ... ), $_POST['rc_redirect'] ) inside rc_send_password_reset_email() at line 306. The nonce required to reach the handler is broadcast by the…
PLUGIN
Membership Plugin
CVE-2026-9273
Risk Score
Threat Entry
Updated 2026-06-17
Membership Plugin - Open Redirect (CVE-2026-4136)
The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Unvalidated Redirect in all versions up to, and including, 3.2.24. This is due to insufficient validation on the redirect url supplied via the 'rcp_redirect' parameter. This makes it possible for unauthenticated attackers to redirect users with the password reset email to potentially malicious sites if they can successfully trick them into performing an action.
PLUGIN
Membership Plugin
CVE-2026-4136
Risk Score
Threat Entry
Updated 2026-06-17
Membership Plugin - Privilege Escalation (CVE-2026-1321)
The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.20. This is due to the `rcp_setup_registration_init()` function accepting any membership level ID via the `rcp_level` POST parameter without validating that the level is active or that payment is required. Combined with the `add_user_role()` method which assigns the WordPress role configured on the membership level without status checks, this makes it possible for unauthenticated attackers to register with any membership level, including inactive levels that grant privileged WordPress roles…
PLUGIN
Membership Plugin
CVE-2026-1321
Risk Score
Threat Entry
Updated 2026-06-17
Membership - Privilege Escalation (CVE-2026-1492)
The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to improper privilege management in all versions up to, and including, 5.1.2. This is due to the plugin accepting a user-supplied role during membership registration without properly enforcing a server-side allowlist. This makes it possible for unauthenticated attackers to create administrator accounts by supplying a role value during membership registration.
PLUGIN
Membership
CVE-2026-1492
Risk Score
Threat Entry
Updated 2026-06-17
Membership Plugin - Cross-Site Scripting (XSS) (CVE-2026-1304)
The Membership Plugin – Restrict Content for WordPress is vulnerable to Stored Cross-Site Scripting via multiple invoice settings fields in all versions up to, and including, 3.2.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Membership Plugin
CVE-2026-1304
Risk Score
Threat Entry
Updated 2026-06-17
Membership Plugin - Broken Access Control (CVE-2025-14844)
The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 3.2.16 via the 'rcp_stripe_create_setup_intent_for_saved_card' function due to missing capability check. Additionally, the plugin does not check a user-controlled key, which makes it possible for unauthenticated attackers to leak Stripe SetupIntent client_secret values for any membership.
PLUGIN
Membership Plugin
CVE-2025-14844
Risk Score
Threat Entry
Updated 2026-06-17
Membership - Cross-Site Request Forgery (CSRF) (CVE-2025-14976)
The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.4.8. This is due to missing or incorrect nonce validation on the 'process_row_actions' function with the 'delete' action. This makes it possible for unauthenticated attackers to delete arbitrary post via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
PLUGIN
Membership
CVE-2025-14976
Risk Score
Threat Entry
Updated 2026-06-17
Membership Plugin - Cross-Site Scripting (XSS) (CVE-2025-14000)
The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'register_form' and 'restrict' shortcodes in all versions up to, and including, 3.2.15 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Membership Plugin
CVE-2025-14000
Risk Score
Threat Entry
Updated 2026-06-17
Membership Plugin - Information Disclosure (CVE-2024-11090)
The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.13 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to higher-level roles such as administrator.
PLUGIN
Membership Plugin
CVE-2024-11090
Risk Score
Threat Entry
Updated 2026-06-17
Membership - Cross-Site Scripting (XSS) (CVE-2023-3182)
The Membership WordPress plugin before 3.2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
PLUGIN
Membership
CVE-2023-3182
Risk Score
Threat Entry
Updated 2026-06-17
Membership - Cross-Site Scripting (XSS) (CVE-2015-9372)
Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
PLUGIN
Membership
CVE-2015-9372
Risk Score