Medium
CVE-2026-103427
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 43
Reset filters
High
CVE-2026-97337
Simple Membership <= 4.8.3 - Missing Authorization to Unauthenticated Account Takeover and Sensitive Information Disclosure via 'email' Parameter on Activation Endpoints
Medium
CVE-2026-74000
Simple Membership <= 4.8.2 - Missing Authorization
Medium
CVE-2026-88764
Simple Membership < 4.7.8 - Missing Authorization
Medium
CVE-2026-77194
Simple Membership <= 4.8.1 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding
Medium
CVE-2026-66712
Simple Membership <= 4.7.8 - Missing Authorization
High
CVE-2026-15931
Simple Membership <= 4.7.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-15930
Simple Membership <= 4.7.7 - Missing Authorization
Medium
CVE-2026-14936
Simple Membership <= 4.7.6 - Unauthenticated Payment Verification Bypass
Medium
CVE-2026-12093
Simple Membership <= 4.7.5 - Missing Authorization to Unauthenticated Arbitrary Member Account Deactivation via Forged Stripe 'charge.refunded' Webhook
High
CVE-2026-11855
Simple Membership <= 4.7.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-8151
Simple Membership MailChimp Integration <= 1.9.7 - Cross-Site Request Forgery
High
CVE-2026-42663
Simple Membership <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-34886
Simple Membership <= 4.7.1 - Missing Authorization
Medium
CVE-2026-1461
Simple Membership <= 4.7.0 - Unauthenticated Improper Handling of Missing Values
Medium
CVE-2026-24986
Simple Membership WP user Import <= 1.9.1 - Cross-Site Request Forgery
Medium
CVE-2026-25308
Simple Membership <= 4.6.9 - Missing Authorization
Medium
CVE-2025-49333
Simple Membership <= 4.6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-24660
Simple Membership Custom Messages <= 2.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-11088
Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor
Medium
CVE-2024-49682
Simple Membership <= 4.5.3 - Unauthenticated Open Redirect
Medium
CVE-2024-47354
Simple Membership After Login Redirection <= 1.6 - Open Redirect
Medium
CVE-2024-4383
Simple Membership <= 4.4.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-3730
Simple Membership <= 4.4.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.