CVE-2025-70150criticalCWE-862

CVE-2025-70150

Published 18 Feb 2026 · Updated 08 Sep 2026

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 0.7%

CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated attackers to delete arbitrary member records via the id parameter.

CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N

Affected products

n/a · n/a

References

https://0x0bito.github.io/posts/CVE-2025-70150-Membership-Unauth-Delete/https://www.phpscriptsonline.com/product/membership-management-software https://youngkevinn.github.io/posts/CVE-2025-70150-Membership-Unauth-Delete/