MMemberPress

Products

Exploited and recent CVEs

• CVE-2026-92797 High 8.8 Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter 0.1%
• CVE-2026-15451 High 8.8 MemberPress Corporate Accounts <= 1.5.39 - Authenticated (Subscriber+) Privilege Escalation via Mass Assignment in Sub-Account Creation 0.4%
• CVE-2024-11299 Medium 5.3 Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure 0.4%
• CVE-2024-5024 Medium 6.1 MemberPress <= 1.11.29 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key Parameters 0.3%
• CVE-2024-5025 Medium 6.4 MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter 0.3%
• CVE-2024-5031 High 8.5 MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode 0.3%
• CVE-2024-1412 Medium 6.1 Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error 0.5%