Log in Start free

wp.insider

Products

ProductCVEsExploitedLatest
Simple Membership7–Sep 17, 2026
Affiliates Manager4–Aug 18, 2026
Simple Membership After Login Redirection1–Oct 10, 2024
Simple Membership Custom Messages1–Feb 3, 2025
Simple Membership WP user Import1–Feb 3, 2026

Exploited and recent CVEs

  • CVE-2026-74000 Medium 5.3 WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability 0.3%
  • CVE-2026-73358 High 7.1 WordPress Affiliates Manager plugin <= 2.9.53 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-73355 Critical 9.3 WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability 0.4%
  • CVE-2026-66712 High 7.5 WordPress Simple Membership plugin <= 4.7.8 - Broken Access Control vulnerability 0.3%
  • CVE-2026-57654 Medium 6.5 WordPress Affiliates Manager plugin <= 2.9.49 - Broken Access Control vulnerability 0.3%
  • CVE-2026-52692 High 7.5 WordPress Affiliates Manager plugin <= 2.9.50 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-42663 Medium 6.5 WordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-34886 High 7.5 WordPress Simple Membership plugin <= 4.7.1 - Broken Access Control vulnerability 0.3%
  • CVE-2026-25308 Medium 4.3 WordPress Simple Membership plugin <= 4.6.9 - Broken Access Control vulnerability 0.2%
  • CVE-2026-24986 Medium 5.4 WordPress Simple Membership WP user Import plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-49333 Medium 5.9 WordPress Simple Membership plugin <= 4.6.3 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-24660 High 7.1 WordPress Simple Membership Custom Messages Plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-49682 Medium 4.7 WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability 0.3%
  • CVE-2024-47354 Medium 4.7 WordPress Simple Membership After Login Redirection plugin <= 1.6 - Open Redirection vulnerability 0.3%