Advisories · Technology

Tips and Tricks HQ WP eMember.

Every CVE that names Tips and Tricks HQ WP eMember among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-54811 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress WP eMember plugin < v10.9.4 - SQL Injection vulnerability
- Tips and Tricks HQ WP eMember
- SQL injection
Not analysed yet 17 Jun 2026
CVE-2026-49077 CVE record

CVSS 5.3 Medium

WordPress WP eMember plugin <= v10.2.2 - Sensitive Data Exposure vulnerability
- Tips and Tricks HQ WP eMember
- Information disclosure
Not analysed yet 4 Jun 2026
CVE-2026-28070 CVE record

CVSS 5.3 Medium

WordPress WP eMember plugin <= v10.2.2 - Broken Access Control vulnerability
- Tips and Tricks HQ WP eMember
- Broken access control
Not analysed yet 19 Mar 2026
CVE-2026-28073 CVE record

CVSS 7.1 High

WordPress WP eMember theme <= v10.2.2 - Reflected Cross Site Scripting (XSS) vulnerability
- Tips and Tricks HQ WP eMember
- Cross-site scripting (XSS)
Not analysed yet 19 Mar 2026