Known vulnerabilities in WP-Members Membership Plugin
The original WordPress membership plugin with content restriction, user login, custom registration fields, user profiles, and more.
18Reported vulnerabilities
8.8Highest CVSS score
3.5.6Latest version
50,000+Active installs
What to do now
Update WP-Members Membership Plugin to 3.5.6 or later.
18 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2019-15660 | High | 0.7% | Before 3.2.8 | 3.2.8 |
August 27, 2019 |
| WF-379408c3-399d-4aff-9a6b-43913aaa52b7 | High | — | Before 2.8.10 | 2.8.10 |
January 7, 2014 |
| CVE-2017-2222 | Medium | 1.8% | Before 3.1.8 | 3.1.8 |
June 13, 2017 |
| CVE-2026-2363 | Medium | 0.3% | 0 to 3.5.5.1 (inclusive) | 3.5.6 |
March 4, 2026 |
| CVE-2025-7495 | Medium | 0.3% | 0 to 3.5.4.1 (inclusive) | 3.5.4.2 |
July 22, 2025 |
| CVE-2025-4610 | Medium | 0.4% | 0 to 3.5.2 (inclusive) | 3.5.3 |
May 17, 2025 |
| CVE-2023-6733 | Medium | 0.4% | 3.4.8 and earlier | 3.4.9 |
January 4, 2024 |
| CVE-2025-57973 | Medium | 0.2% | 3.5.4.2 and earlier | 3.5.4.3 |
September 22, 2025 |
| CVE-2025-50051 | Medium | 0.2% | 3.5.4 and earlier | 3.5.4.1 |
June 19, 2025 |
| CVE-2024-1852 | Medium | 0.7% | Before 3.4.9.3 | 3.4.9.3 |
April 9, 2024 |
| CVE-2024-9231 | Medium | 0.4% | Before 3.4.9.6 | 3.4.9.6 |
October 22, 2024 |
| CVE-2024-10374 | Medium | 0.4% | Before 3.4.9.6 | 3.4.9.6 |
October 25, 2024 |
| CVE-2024-1987 | Medium | 0.4% | Before 3.4.9.2 | 3.4.9.2 |
March 8, 2024 |
| CVE-2025-14448 | Medium | 0.2% | 3.5.4.3 and earlier | 3.5.4.4 |
January 15, 2026 |
| CVE-2025-12648 | Medium | 0.3% | 0 to 3.5.4.4 (inclusive) | 3.5.4.5 |
January 7, 2026 |
| CVE-2024-2920 | Medium | 0.5% | 3.4.9.3 and earlier | 3.4.9.4 |
April 25, 2024 |
| CVE-2025-9489 | Medium | 0.3% | 0 to 3.5.4.2 (inclusive) | 3.5.4.3 |
September 9, 2025 |
| CVE-2023-2869 | Medium | 0.5% | Before 3.4.8 | 3.4.8 |
July 12, 2023 |