Skip to content

Lomu

Products

Product	CVEs	Exploited	Latest
WPCOM Member	2	–	Apr 16, 2025

Exploited and recent CVEs

CVE-2025-39570 High 8.8 WordPress WPCOM Member plugin <= 1.7.7 - Local File Inclusion Vulnerability 0.8%
CVE-2024-47378 High 7.1 WordPress WPCOM Member plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%