VendorsCaseproofmemberpressall versions
Vulnerabilities

Caseproof MemberPress

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2024-43956
WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerability
Published 2024-11-01 · Modified
9.8EPSS 0.004
CVE-2024-5031
MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode
Published 2024-05-22 · Modified
8.5EPSS 0.003
CVE-2024-11299
Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Published 2025-04-22 · Analyzed
7.5EPSS 0.004
CVE-2024-5025
MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter
Published 2024-05-22 · Modified
6.4EPSS 0.003
CVE-2024-1412
Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error
Published 2024-04-09 · Modified
6.1EPSS 0.005