Wpinsider-1

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 5
    Known Exploited: 0
    0
    Critical Level Threats
    1
    High Level Threats
    4
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-103427

    Simple Membership <= 4.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Country Field

    Last Modified: Oct 19, 2026
    Published: Oct 10, 2026

    CVE-2026-97337

    Simple Membership <= 4.8.3 - Missing Authorization to Unauthenticated Account Takeover and Sensitive Information Disclosure via 'email' Parameter on Activation Endpoints

    Last Modified: Oct 04, 2026
    Published: Oct 03, 2026

    CVE-2026-77194

    Simple Membership <= 4.8.1 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding

    Last Modified: Sep 01, 2026
    Published: Sep 01, 2026

    CVE-2026-12093

    Simple Membership <= 4.7.5 - Missing Authorization to Unauthenticated Arbitrary Member Account Deactivation via Forged Stripe 'charge.refunded' Webhook

    Last Modified: Jun 18, 2026
    Published: Jun 18, 2026

    CVE-2026-1461

    Simple Membership <= 4.7.0 - Unauthenticated Improper Handling of Missing Values

    Last Modified: Apr 15, 2026
    Published: Feb 19, 2026
    Items Per Page