<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: simple-membership</title><description>Every new CVE for simple-membership.</description><link>https://agentprime.io/</link><item><title>CVE-2026-88785: Simple Membership &lt; 4.8.3 - Newly Registered Member Password Disclosure via URL Query String</title><link>https://agentprime.io/advisories/CVE-2026-88785/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-88785/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 11 Oct 2026 06:00:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-88764: Simple Membership &lt; 4.7.8 - Subscriber+ Membership Level Escalation via PayPal Standard subsc_ref</title><link>https://agentprime.io/advisories/CVE-2026-88764/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-88764/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 13 Sep 2026 06:00:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-14936: Simple Membership &lt; 4.7.7 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification</title><link>https://agentprime.io/advisories/CVE-2026-14936/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-14936/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Aug 2026 17:04:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15931: Simple Membership &lt; 4.7.8 - Unauthenticated Stored XSS via PayPal Subscription Subscriber Name</title><link>https://agentprime.io/advisories/CVE-2026-15931/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15931/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 03 Aug 2026 06:00:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15930: Simple Membership &lt; 4.7.8 - Unauthenticated Administrator Account Takeover via Registration Username Collision</title><link>https://agentprime.io/advisories/CVE-2026-15930/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15930/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 03 Aug 2026 06:00:12 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-11855: Simple Membership &lt; 4.7.5 - Unauthenticated Stored XSS via Stripe Webhook API Version</title><link>https://agentprime.io/advisories/CVE-2026-11855/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-11855/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 06 Jul 2026 06:00:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-4469: Simple Membership &lt; 4.2.2 - Contributor+ Stored XSS</title><link>https://agentprime.io/advisories/CVE-2022-4469/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-4469/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 16 Jan 2023 15:37:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-2317: Simple Membership &lt; 4.1.3 - Unauthenticated Membership Privilege Escalation</title><link>https://agentprime.io/advisories/CVE-2022-2317/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-2317/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 Aug 2022 12:52:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-2273: Simple Membership &lt; 4.1.3 - Membership Privilege Escalation</title><link>https://agentprime.io/advisories/CVE-2022-2273/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-2273/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 Aug 2022 12:51:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-1724: Simple Membership &lt; 4.1.1 - Reflected Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2022-1724/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-1724/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 13 Jun 2022 12:42:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-0681: Simple Membership &lt; 4.1.0 - Arbitrary Transaction Deletion via CSRF</title><link>https://agentprime.io/advisories/CVE-2022-0681/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-0681/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 21 Mar 2022 18:55:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-0328: Simple Membership &lt; 4.0.9 - Arbitrary Member Deletion via CSRF</title><link>https://agentprime.io/advisories/CVE-2022-0328/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-0328/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 28 Feb 2022 09:06:45 GMT</pubDate><category>CVE</category></item></channel></rss>