CVE-2026-15931

The Simple Membership WordPress plugin, in versions before 4.7.8 , is vulnerable to unauthenticated stored XSS . The flaw exists because the plugin fails to sanitise a subscriber name value received from an unauthenticated payment approval request and fails to escape it when rendered in the admin...