Login Request a demo
ME
Product
Memberpress
by Caseproof · last CVE Apr 22, 2025
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 1Medium 3Low 0
Severity
All severities5Critical1High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Memberpress to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-43956
9.8
0%
Nov 1
WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerability
Affected: before 1.11.35
CVE-2024-11299
7.5
0%
Apr 22
Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Affected: through 1.11.37
CVE-2024-5031
6.4
0%
May 22
MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode
Affected: before 1.11.30
CVE-2024-1412
6.1
0%
Apr 9
Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error
Affected: before 1.11.27
CVE-2024-5025
5.4
0%
May 22
MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter
Affected: before 1.11.30
Showing 5