ME
Product
Memberpress
6
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 4Low 0
Watch
Add Memberpress to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-5031 | 6.4 | May 22 | MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode Affected: through 1.11.29 |
| CVE-2024-5024 | 6.1 | Aug 30 | MemberPress <= 1.11.29 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key Parameters Affected: through 1.11.29 |
| CVE-2024-1412 | 6.1 | Apr 9 | Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error Affected: through 1.11.26 |
| CVE-2024-5025 | 5.4 | May 22 | MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter Affected: through 1.11.29 |
Showing 4