WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Simple Membership

Simple membership plugin adds membership functionality to your site. Protect members only content using content protection easily.

33Reported vulnerabilities
9.8Highest CVSS score
4.8.0Latest version
40,000+Active installs

What to do now

Update Simple Membership to 4.8.2 or later. 33 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 17, 2026 / Tested up to WordPress: 7.1 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days
Affected versionsFixed inPublished
CVE-2022-2317 Critical 9.8 1.4% Before 4.1.3 4.1.3 August 1, 2022
CVE-2019-14328 High 8.8 3.1% Before 3.8.5 3.8.5 July 28, 2019
CVE-2022-2273 High 8.8 1.2% Before 4.1.3 4.1.3 August 1, 2022
CVE-2022-1724 Medium 6.1 1.8% Before 4.1.1 4.1.1 June 13, 2022
CVE-2022-0681 Medium 6.5 0.5% Before 4.1.0 4.1.0 March 21, 2022
CVE-2022-4469 Medium 5.4 0.5% Before 4.2.2 4.2.2 January 16, 2023
CVE-2023-41956 High 8.8 0.7% 4.3.4 and earlier 4.3.5 September 25, 2023
CVE-2016-10884 High 8.8 0.7% Before 3.3.3 3.3.3 August 14, 2019
CVE-2022-0328 Medium 4.7 0.5% Before 4.0.9 4.0.9 February 28, 2022
CVE-2024-11088 High 7.5 0.6% Before 4.5.6 4.5.6 November 21, 2024
CVE-2023-41957 High 7.3 0.6% 4.3.4 and earlier 4.3.5 September 25, 2023
CVE-2026-15931 High 7.2 0.2% 4.7.7 and earlier 4.7.8 July 24, 2026
CVE-2026-42663 High 7.2 0.2% 4.7.2 and earlier 4.7.3 May 3, 2026
WF-1664fef3-6416-4678-9ee7-bed2184d7490 High 7.2 4.0.3 and earlier 4.0.4 April 5, 2021
CVE-2026-1461 Medium 6.5 0.2% 0 to 4.7.0 (inclusive) 4.7.1 February 19, 2026
CVE-2024-1985 Medium 6.1 0.9% Before 4.4.3 4.4.3 March 13, 2024
CVE-2023-4719 Medium 6.1 0.6% Before 4.3.6 4.3.6 September 6, 2023
CVE-2017-18499 Medium 6.1 0.9% Before 3.5.7 3.5.7 August 12, 2019
CVE-2024-49682 Medium 6.1 0.3% 4.5.3 and earlier 4.5.4 October 21, 2024
CVE-2024-22308 Medium 6.1 0.3% 4.4.1 and earlier 4.4.2 January 19, 2024
CVE-2023-6882 Medium 6.1 0.4% 4.3.8 and earlier 4.3.9 January 11, 2024
CVE-2023-50376 Medium 6.1 0.5% Before 4.3.9 4.3.9 December 19, 2023
WF-95c2038f-c4f9-472a-92ab-59ee395bda3d Medium 6.1 Before 3.2.9 3.2.9 July 14, 2016
CVE-2024-4383 Medium 5.4 0.4% Before 4.4.6 4.4.6 May 14, 2024
CVE-2024-3730 Medium 5.4 0.3% Before 4.4.4 4.4.4 April 25, 2024
CVE-2026-77194 Medium 5.3 0.4% 0 to 4.8.1 (inclusive) 4.8.2 September 1, 2026
CVE-2026-14936 Medium 5.3 0.2% 0 up to (but not including) 4.7.7 4.7.7 August 6, 2026
CVE-2026-66712 Medium 5.3 0.2% 4.7.8 and earlier 4.7.9 August 5, 2026
CVE-2026-15930 Medium 5.3 0.3% 4.7.7 and earlier 4.7.8 July 24, 2026
CVE-2026-12093 Medium 5.3 0.4% 0 to 4.7.5 (inclusive) 4.7.6 June 18, 2026
CVE-2026-34886 Medium 5.3 0.3% 4.7.1 and earlier 4.7.2 March 31, 2026
CVE-2026-25308 Medium 4.3 0.2% 4.6.9 and earlier 4.7.0 January 19, 2026
CVE-2025-49333 Medium 4.4 0.2% 4.6.3 and earlier 4.6.4 June 5, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.