VendorsButlerblogwp-membersall versions
Vulnerabilities

Butlerblog WP-Members

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2019-15660
The wp-members plugin before 3.2.8 for WordPress has CSRF.
Published 2019-08-27 · Modified
8.8EPSS 0.007
CVE-2024-1852
WP-Members Membership Plugin <= 3.4.9.2 - Unauthenticated Stored Cross-Site Scripting
Published 2024-04-09 · Modified
7.2EPSS 0.007
CVE-2023-6733
WP-Members Membership Plugin <= 3.4.8 - Missing Authorization to Sensitive Information Exposure
Published 2024-01-04 · Modified
6.5EPSS 0.004
CVE-2024-10374
WP-Members <= 3.4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_loginout Shortcode
Published 2024-10-25 · Analyzed
6.4EPSS 0.004
CVE-2024-1987
WP-Members Membership Plugin <= 3.4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2024-03-08 · Modified
6.4EPSS 0.004
CVE-2017-2222
Cross-site scripting vulnerability in WP-Members prior to version 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2017-07-07 · Modified
6.1EPSS 0.018
CVE-2024-9231
WP-Members Membership Plugin <= 3.4.9.5 - Reflected Cross-Site Scripting
Published 2024-10-22 · Analyzed
6.1EPSS 0.004
CVE-2025-14448
WP-Members Membership Plugin <= 3.5.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Checkbox and Multiple Select User Profile Fields
Published 2026-01-15 · Analyzed
5.4EPSS 0.002
CVE-2023-2869
WP-Members Membership <= 3.4.7.3 - Missing Authorization to Settings Update
Published 2023-07-12 · Modified
4.3EPSS 0.005