Login Request a demo
ME
Product
Memberpress
by MemberPress · last CVE Oct 28, 2026
6
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 2Medium 4Low 0
Severity
All severities6Critical0High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Memberpress to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-92797
New
8.8
0%
Oct 28
Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter
Affected: through 1.14.1
CVE-2024-11299
7.5
0%
Apr 22
Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Affected: through 1.11.37
CVE-2024-5031
6.4
0%
May 22
MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode
Affected: through 1.11.29
CVE-2024-5024
6.1
0%
Aug 30
MemberPress <= 1.11.29 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key Parameters
Affected: through 1.11.29
CVE-2024-1412
6.1
0%
Apr 9
Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error
Affected: through 1.11.26
CVE-2024-5025
5.4
0%
May 22
MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter
Affected: through 1.11.29
Showing 6