Tips and Tricks HQ

Products

Product	CVEs	Exploited	Latest
WP eMember	4	–	Jun 17, 2026
Simple Download Monitor	2	–	Oct 21, 2020
Easy Accept Payments	1	–	Apr 29, 2024
Software License Manager	1	–	Jul 14, 2021
Stripe Payments	1	–	Jun 4, 2024
WP Express Checkout (Accept PayPal Payments)	1	–	May 17, 2024

CVE-2026-54811 Critical 9.3 WordPress WP eMember plugin < v10.9.4 - SQL Injection vulnerability 0.3%
CVE-2026-49077 Medium 5.3 WordPress WP eMember plugin <= v10.2.2 - Sensitive Data Exposure vulnerability 0.2%
CVE-2026-28070 Medium 5.3 WordPress WP eMember plugin <= v10.2.2 - Broken Access Control vulnerability 0.3%
CVE-2026-28073 High 7.1 WordPress WP eMember theme <= v10.2.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2023-48285 Medium 5.3 WordPress Accept Stripe Payments plugin <= 2.0.79 - Content Injection vulnerability 0.3%
CVE-2024-30527 High 7.5 WordPress WP Express Checkout plugin <= 2.3.7 - Price Manipulation vulnerability 0.5%
CVE-2024-33591 High 7.5 WordPress Easy Accept Payments for PayPal plugin <= 4.9.10 - Broken Access Control vulnerability 0.5%
CVE-2021-20782 Unrated Cross-site request forgery (CSRF) vulnerability in Software License Manager versions prior to 4.4.6 allows remote attackers to hijack the authentication of administrators via unspecified vectors. 0.9%
CVE-2020-5651 Unrated SQL injection vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to execute arbitrary SQL commands via a specially crafted URL. 1.5%
CVE-2020-5650 Unrated Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors. 0.9%