Wp emember
This hub aggregates every CVE we track for Wp emember, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.
14
CVEs tracked
1
Critical
5
High
0
In CISA KEV
Severity distribution
MEDIUM8HIGH5CRITICAL1
Monthly trend
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
2
0
0
2
0
0
0
2024-102026-09
Latest CVEs
The 14 most recently published vulnerabilities affecting Wp emember.
- CVE-2026-54811WordPress WP eMember plugin < v10.9.4 - SQL Injection vulnerability9.3
- CVE-2026-49077WordPress WP eMember plugin <= v10.2.2 - Sensitive Data Exposure vulnerability5.3
- CVE-2026-28070WordPress WP eMember plugin <= v10.2.2 - Broken Access Control vulnerability5.3
- CVE-2026-28073WordPress WP eMember theme <= v10.2.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1
- CVE-2024-5081WP eMember <= v10.7.0 - Stored XSS via CSRF6.1
- CVE-2024-5744WP eMember < 10.6.7 - Reflected XSS6.8
- CVE-2024-5715WP eMember < 10.6.7 - Reflected XSS via Member Edit7.1
- CVE-2024-5079WP eMember < 10.6.7 - Unauthenticated Stored XSS via Member Registration6.1
- CVE-2024-5077WP eMember < 10.6.6 - Stored XSS in Blacklist via CSRF6.8
- CVE-2024-5080WP eMember < 10.6.6 - Admin+ Arbitrary File Upload8.8
- CVE-2024-5076WP eMember < 10.6.6 - Bulk Delete via CSRF8.8
- CVE-2024-5074WP eMember < 10.6.6 - Reflected XSS5.4
- CVE-2024-5075WP eMember < 10.6.6 - Reflected XSS5.9
- CVE-2024-4749WP eMember < 10.3.9 - Reflected XSS8.3
Product normalization is registry-driven with AI assist and human review. How it works