cbutlerjr WP-Members Membership Plugin.

WP-Members Membership Plugin <= 3.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via WooCommerce Checkout Multicheckbox/Multiselect Field

• cbutlerjr WP-Members Membership Plugin
• Cross-site scripting (XSS)

WP-Members Membership Plugin <= 3.5.6 - Reflected Cross-Site Scripting

• cbutlerjr WP-Members Membership Plugin
• Cross-site scripting (XSS)

WP-Members Membership Plugin <= 3.5.5.1 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute

• cbutlerjr WP-Members Membership Plugin
• SQL injection

WP-Members Membership Plugin <= 3.5.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Checkbox and Multiple Select User Profile Fields

• cbutlerjr WP-Members Membership Plugin
• Cross-site scripting (XSS)

WP-Members Membership Plugin <= 3.5.4.4 - Unauthenticated Information Exposure via Unprotected Files

• cbutlerjr WP-Members Membership Plugin
• Information disclosure

WP-Members Membership Plugin <= 3.5.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Profile Names

• cbutlerjr WP-Members Membership Plugin
• Code injection

WP-Members <= 3.5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

• cbutlerjr WP-Members Membership Plugin
• Cross-site scripting (XSS)

WP-Members <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_user_memberships Shortcode

• cbutlerjr WP-Members Membership Plugin
• Cross-site scripting (XSS)

WP-Members <= 3.4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_loginout Shortcode

• cbutlerjr WP-Members Membership Plugin
• Cross-site scripting (XSS)

WP-Members Membership Plugin <= 3.4.9.5 - Reflected Cross-Site Scripting

• cbutlerjr WP-Members Membership Plugin
• Cross-site scripting (XSS)

WP-Members Membership Plugin <= 3.4.9.3 - Unprotected Storage of Potentially Sensitive Files

• cbutlerjr WP-Members Membership Plugin
• Information disclosure

WP-Members Membership Plugin <= 3.4.9.2 - Unauthenticated Stored Cross-Site Scripting

• cbutlerjr WP-Members Membership Plugin
• Cross-site scripting (XSS)

WP-Members Membership Plugin <= 3.4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

• cbutlerjr WP-Members Membership Plugin
• Cross-site scripting (XSS)

WP-Members Membership Plugin <= 3.4.8 - Missing Authorization to Sensitive Information Exposure

• cbutlerjr WP-Members Membership Plugin
• Broken access control

WP-Members Membership <= 3.4.7.3 - Missing Authorization to Settings Update

• cbutlerjr WP-Members Membership Plugin
• Broken access control