PT-2026-127898

The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.14.1. This is due to a bypassable nonce verification check in the save profile fields function that uses an isset condition at line 1119, allowing the security check to be complete...