Advisories · Technology
Memberpress.
Every CVE that names Memberpress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter
- Memberpress
- Cross-site request forgery (CSRF)
- CVSS 5.3 Medium
Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
- Memberpress
- Information disclosure
- CVSS 6.1 Medium
MemberPress <= 1.11.29 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key Parameters
- Memberpress
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter
- Memberpress
- Cross-site scripting (XSS)
- CVSS 8.5 High
MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode
- Memberpress
- Server-side request forgery (SSRF)
- CVSS 6.1 Medium
Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error
- Memberpress
- Cross-site scripting (XSS)