Known vulnerabilities in the Wp Members plugin
12 security advisories have been published for the Wp Members plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Wp Members - SQL Injection (CVE-2026-2363) MEDIUM
- Wp Members - Cross-Site Scripting (XSS) (CVE-2025-14448) MEDIUM
- Wp Members - Security Vulnerability (CVE-2025-12648) MEDIUM
- Wp Members - Security Vulnerability (CVE-2025-9489) MEDIUM
- Wp Members - Cross-Site Scripting (XSS) (CVE-2025-7495) MEDIUM
- Wp Members - Cross-Site Scripting (XSS) (CVE-2025-4610) MEDIUM
- Wp Members - Cross-Site Scripting (XSS) (CVE-2024-10374) MEDIUM
- Wp Members - Cross-Site Scripting (XSS) (CVE-2024-9231) MEDIUM
- Wp Members - Cross-Site Scripting (XSS) (CVE-2024-1852) HIGH
- Wp Members - Cross-Site Scripting (XSS) (CVE-2024-1987) MEDIUM
- Wp Members - Information Disclosure (CVE-2023-6733) MEDIUM
- Wp Members - Broken Access Control (CVE-2023-2869) MEDIUM