VendorsWPCOMwpcom_memberall versions
Vulnerabilities

WPCOM Member

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2024-7493
WPCOM Member <= 1.5.2.1 - Unauthenticated Privilege Escalation via User Meta
Published 2024-09-06 · Modified
9.8EPSS 0.006
CVE-2025-2221
WPCOM Member <= 1.7.6 - Unauthenticated Time-Based SQL Injection
Published 2025-03-14 · Analyzed
7.5EPSS 0.017
CVE-2024-47378
WordPress WPCOM Member plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability
Published 2024-10-05 · Modified
7.1EPSS 0.003