Wp.Insider Simple Membership vulnerabilities

3 known vulnerabilities affecting wp.insider/simple_membership.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM2UNKNOWN1

Vulnerabilities

Page 1 of 1

CVE-2026-25308MEDIUMCVSS 4.3≤ 4.6.92026-02-19

CVE-2026-25308 [MEDIUM] CWE-862 CVE-2026-25308: Missing Authorization vulnerability in wp.insider Simple Membership simple-membership allows Exploit Missing Authorization vulnerability in wp.insider Simple Membership simple-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Membership: from n/a through <= 4.6.9.

CVE-2025-49333UNKNOWN≤ 4.6.32025-06-06

CVE-2025-49333 CWE-79 CVE-2025-49333: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wp.insider Simple Membership simple-membership allows Stored XSS.This issue affects Simple Membership: from n/a through <= 4.6.3.

CVE-2024-49682MEDIUMCVSS 6.1≤ 4.5.32024-10-24

CVE-2024-49682 [MEDIUM] CWE-601 CVE-2024-49682: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership si URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership simple-membership allows Phishing.This issue affects Simple Membership: from n/a through <= 4.5.3.