Vendor
Cbutlerjr
15 known vulnerabilities in products by Cbutlerjr, 0 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2026-96565 | Cbutlerjr WP-Members Membership Plugin: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-84960 | WP-Members Membership Plugin <= 3.5.6 - Reflected Cross-Site Scripting | 6.1 | |
| High | CVE-2024-1852 | WP-Members Membership Plugin <= 3.4.9.2 - Unauthenticated Stored Cross-Site Scripting | 7.2 | |
| Medium | CVE-2024-10374 | Cbutlerjr WP-Members Membership Plugin: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-2363 | Cbutlerjr WP-Members Membership Plugin: SQL Injection | 6.5 | |
| Medium | CVE-2025-4610 | Cbutlerjr WP-Members Membership Plugin: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-9231 | WP-Members Membership Plugin <= 3.4.9.5 - Reflected Cross-Site Scripting | 6.1 | |
| Medium | CVE-2025-7495 | WP-Members <= 3.5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | |
| Medium | CVE-2023-6733 | WP-Members Membership Plugin <= 3.4.8 - Missing Authorization to Sensitive Information Exposure | 6.5 | |
| Medium | CVE-2024-2920 | WP-Members Membership Plugin <= 3.4.9.3 - Unprotected Storage of Potentially Sensitive Files | 5.3 | |
| Medium | CVE-2025-12648 | WP-Members Membership Plugin <= 3.5.4.4 - Unauthenticated Information Exposure via Unprotected Files | 5.3 | |
| Medium | CVE-2024-1987 | Cbutlerjr WP-Members Membership Plugin: Cross-site Scripting | 6.4 | |
| Medium | CVE-2025-14448 | Cbutlerjr WP-Members Membership Plugin: Cross-site Scripting | 5.4 | |
| Medium | CVE-2023-2869 | WP-Members Membership <= 3.4.7.3 - Missing Authorization to Settings Update | 4.3 | |
| Medium | CVE-2025-9489 | Cbutlerjr WP-Members Membership Plugin: Code Injection | 5.0 |
Products
| Wp-members Membership Plugin | 15 | 0 |