agentprime: cbutlerjr-wp-members-membership-pluginEvery new CVE for cbutlerjr-wp-members-membership-plugin.https://agentprime.io/CVE-2026-96565: WP-Members Membership Plugin <= 3.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via WooCommerce Checkout Multicheckbox/Multiselect Fieldhttps://agentprime.io/advisories/CVE-2026-96565/https://agentprime.io/advisories/CVE-2026-96565/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Nov 2026 11:26:27 GMTCVECVE-2026-84960: WP-Members Membership Plugin <= 3.5.6 - Reflected Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2026-84960/https://agentprime.io/advisories/CVE-2026-84960/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 03:39:37 GMTCVECVE-2026-2363: WP-Members Membership Plugin <= 3.5.5.1 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-2363/https://agentprime.io/advisories/CVE-2026-2363/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Mar 2026 06:26:52 GMTCVECVE-2025-14448: WP-Members Membership Plugin <= 3.5.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Checkbox and Multiple Select User Profile Fieldshttps://agentprime.io/advisories/CVE-2025-14448/https://agentprime.io/advisories/CVE-2025-14448/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Jan 2026 05:24:19 GMTCVECVE-2025-12648: WP-Members Membership Plugin <= 3.5.4.4 - Unauthenticated Information Exposure via Unprotected Fileshttps://agentprime.io/advisories/CVE-2025-12648/https://agentprime.io/advisories/CVE-2025-12648/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Jan 2026 02:21:46 GMTCVECVE-2025-9489: WP-Members Membership Plugin <= 3.5.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Profile Nameshttps://agentprime.io/advisories/CVE-2025-9489/https://agentprime.io/advisories/CVE-2025-9489/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 04:25:55 GMTCVECVE-2025-7495: WP-Members <= 3.5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-7495/https://agentprime.io/advisories/CVE-2025-7495/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Jul 2025 04:25:07 GMTCVECVE-2025-4610: WP-Members <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_user_memberships Shortcodehttps://agentprime.io/advisories/CVE-2025-4610/https://agentprime.io/advisories/CVE-2025-4610/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 May 2025 09:22:53 GMTCVECVE-2024-10374: WP-Members <= 3.4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_loginout Shortcodehttps://agentprime.io/advisories/CVE-2024-10374/https://agentprime.io/advisories/CVE-2024-10374/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Oct 2024 11:36:09 GMTCVECVE-2024-9231: WP-Members Membership Plugin <= 3.4.9.5 - Reflected Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-9231/https://agentprime.io/advisories/CVE-2024-9231/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Oct 2024 09:32:09 GMTCVECVE-2024-2920: WP-Members Membership Plugin <= 3.4.9.3 - Unprotected Storage of Potentially Sensitive Fileshttps://agentprime.io/advisories/CVE-2024-2920/https://agentprime.io/advisories/CVE-2024-2920/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Apr 2024 07:28:19 GMTCVECVE-2024-1852: WP-Members Membership Plugin <= 3.4.9.2 - Unauthenticated Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-1852/https://agentprime.io/advisories/CVE-2024-1852/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:58:29 GMTCVECVE-2024-1987: WP-Members Membership Plugin <= 3.4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodehttps://agentprime.io/advisories/CVE-2024-1987/https://agentprime.io/advisories/CVE-2024-1987/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 Mar 2024 05:31:47 GMTCVECVE-2023-6733: WP-Members Membership Plugin <= 3.4.8 - Missing Authorization to Sensitive Information Exposurehttps://agentprime.io/advisories/CVE-2023-6733/https://agentprime.io/advisories/CVE-2023-6733/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jan 2024 03:30:12 GMTCVECVE-2023-2869: WP-Members Membership <= 3.4.7.3 - Missing Authorization to Settings Updatehttps://agentprime.io/advisories/CVE-2023-2869/https://agentprime.io/advisories/CVE-2023-2869/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Jul 2023 04:38:48 GMTCVE