CVE-2026-96565

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via WooCommerce Checkout Multicheckbox/Multiselect Field scalar bypass of wpmemsanitizearray in all versions up to, and including, 3.5.7 due to insufficient input sanitization and output escaping...

EUVD-2026-119143

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via WooCommerce Checkout Multicheckbox/Multiselect Field scalar bypass of wpmemsanitizearray in all versions up to, and including, 3.5.7 due to insufficient input sanitization and output escaping...

CVE-2026-96565

The WP-Members Membership Plugin for WordPress (versions

CVE-2026-96565 WP-Members Membership Plugin <= 3.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via WooCommerce Checkout Multicheckbox/Multiselect Field

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via WooCommerce Checkout Multicheckbox/Multiselect Field scalar bypass of wpmemsanitizearray in all versions up to, and including, 3.5.7 due to insufficient input sanitization and output escaping...

WordPress WP-Members Membership Plugin plugin <= 3.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Jacek Sowiński dzaku in WordPress Plugin WP-Members versions = 3.5.7...

PT-2026-139450

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via WooCommerce Checkout Multicheckbox/Multiselect Field scalar bypass of wpmem sanitize array in all versions up to, and including, 3.5.7 due to insufficient input sanitization and output escaping...

CVE-2026-61994

Missing Authorization vulnerability in RocketGeek WP-Members wp-members allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Members: from n/a through 3.5.7...

CVE-2026-61994

The RocketGeek WP-Members plugin (versions up to and including 3.5.7 ) is susceptible to a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , potentially enabling unauthorized access to restricted areas or function...

CVE-2026-61994 WordPress WP-Members plugin <= 3.5.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in RocketGeek WP-Members wp-members allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Members: from n/a through 3.5.7...

EUVD-2026-97735

Missing Authorization vulnerability in RocketGeek WP-Members wp-members allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Members: from n/a through 3.5.7...

CVE-2026-61994 WordPress WP-Members plugin <= 3.5.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in RocketGeek WP-Members wp-members allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Members: from n/a through 3.5.7...

WordPress WP-Members plugin <= 3.5.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin WP-Members versions = 3.5.7...

PT-2026-110861

Name of the Vulnerable Software and Affected Versions WP-Members versions prior to 3.5.8 Description A missing authorization issue exists in the RocketGeek WP-Members plugin, which allows the exploitation of incorrectly configured access control security levels. This is a broken access control fl...

CVE-2026-61994: Missing Authorization

Missing Authorization vulnerability in RocketGeek WP-Members wp-members allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Members: from n/a through 3.5.7...

WordPress WP-Members Membership Plugin plugin <= 3.5.6 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Kuba in WordPress Plugin WP-Members versions = 3.5.6...

CVE-2026-84960

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL Query String in all versions up to, and including, 3.5.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

CVE-2026-84960 WP-Members Membership Plugin <= 3.5.6 - Reflected Cross-Site Scripting

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL Query String in all versions up to, and including, 3.5.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

CVE-2026-84960 WP-Members Membership Plugin <= 3.5.6 - Reflected Cross-Site Scripting

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL Query String in all versions up to, and including, 3.5.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

CVE-2026-84960

The WP-Members Membership Plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the URL query string in all versions up to and including 3.5.6 . The root cause is insufficient input sanitization and output escaping in the plugin's forms component. An unauthenticated attac...

EUVD-2026-75933

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL Query String in all versions up to, and including, 3.5.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...