ME
Vendor
MemberPress
7
CVEs
0
On KEV
1
New 30D
Products
ME8.8
Memberpress
MemberPress
6 CVEs0 on KEV1 new
MC8.8
MemberPress Corporate Accounts
MemberPress
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-92797 New | ME Memberpress MemberPress | 8.8 | Oct 28 | Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter |
| CVE-2026-15451 | MC MemberPress Corporate Accounts MemberPress | 8.8 | Sep 12 | MemberPress Corporate Accounts <= 1.5.39 - Authenticated (Subscriber+) Privilege Escalation via Mass Assignment in Sub-Account Creation |
| CVE-2024-11299 | ME Memberpress MemberPress | 7.5 | Apr 22 | Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure |
| CVE-2024-5024 | ME Memberpress MemberPress | 6.1 | Aug 30 | MemberPress <= 1.11.29 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key Parameters |
| CVE-2024-5025 | ME Memberpress MemberPress | 5.4 | May 22 | MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter |
| CVE-2024-5031 | ME Memberpress MemberPress | 6.4 | May 22 | MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode |
| CVE-2024-1412 | ME Memberpress MemberPress | 6.1 | Apr 9 | Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error |