Vulnerabilities in MemberPress
7 resultsCVE-2024-1412MEDIUMMemberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and errorEPSS 0.5%CVE-2026-15451HIGHMemberPress Corporate Accounts <= 1.5.39 - Authenticated (Subscriber+) Privilege Escalation via Mass Assignment in Sub-Account CreationEPSS 0.4%CVE-2024-11299MEDIUMMemberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information ExposureEPSS 0.4%CVE-2024-5024MEDIUMMemberPress <= 1.11.29 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key ParametersEPSS 0.3%CVE-2024-5031HIGHMemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file ShortcodeEPSS 0.3%CVE-2024-5025MEDIUMMemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist ParameterEPSS 0.3%CVE-2026-92797HIGHMemberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' ParameterEPSS 0.1%