Unknown Simple Membership

• CVE-2026-88785 Medium 4.7 Simple Membership < 4.8.3 - Newly Registered Member Password Disclosure via URL Query String <0.1%
• CVE-2026-88764 Medium 5.4 Simple Membership < 4.7.8 - Subscriber+ Membership Level Escalation via PayPal Standard subsc_ref 0.2%
• CVE-2026-14936 Medium 5.3 Simple Membership < 4.7.7 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification 0.2%
• CVE-2026-15931 Medium 6.1 Simple Membership < 4.7.8 - Unauthenticated Stored XSS via PayPal Subscription Subscriber Name 0.3%
• CVE-2026-15930 Critical 9.4 Simple Membership < 4.7.8 - Unauthenticated Administrator Account Takeover via Registration Username Collision 0.4%
• CVE-2026-11855 High 8.8 Simple Membership < 4.7.5 - Unauthenticated Stored XSS via Stripe Webhook API Version 0.5%
• CVE-2022-4469 Medium 5.4 Simple Membership < 4.2.2 - Contributor+ Stored XSS 0.5%
• CVE-2022-2317 Unrated Simple Membership < 4.1.3 - Unauthenticated Membership Privilege Escalation 1.4%
• CVE-2022-2273 Unrated Simple Membership < 4.1.3 - Membership Privilege Escalation 1.2%
• CVE-2022-1724 Unrated Simple Membership < 4.1.1 - Reflected Cross-Site Scripting 1.8%
• CVE-2022-0681 Unrated Simple Membership < 4.1.0 - Arbitrary Transaction Deletion via CSRF 0.5%
• CVE-2022-0328 Unrated Simple Membership < 4.0.9 - Arbitrary Member Deletion via CSRF 0.5%