Vendor

    Wp.insider

    14 known vulnerabilities in products by Wp.insider, 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Wp.insider
    CriticalCVE-2026-73355

    WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability

    		9.3
    HighCVE-2026-66712

    WordPress Simple Membership plugin <= 4.7.8 - Broken Access Control vulnerability

    		7.5
    HighCVE-2026-73358

    WordPress Affiliates Manager plugin <= 2.9.53 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2026-34886

    WordPress Simple Membership plugin <= 4.7.1 - Broken Access Control vulnerability

    		7.5
    HighCVE-2026-52692

    WordPress Affiliates Manager plugin <= 2.9.50 - Sensitive Data Exposure vulnerability

    		7.5
    MediumCVE-2026-74000

    WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2026-57654

    WordPress Affiliates Manager plugin <= 2.9.49 - Broken Access Control vulnerability

    		6.5
    MediumCVE-2026-42663

    WordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability

    		6.5
    HighCVE-2025-24660

    Wp.insider Simple Membership Custom Messages: Cross-site Scripting

    		7.1
    MediumCVE-2026-24986

    Wp.insider Simple Membership WP user Import: Cross-Site Request Forgery (CSRF)

    		5.4
    MediumCVE-2025-49333

    WordPress Simple Membership plugin <= 4.6.3 - Cross Site Scripting (XSS) Vulnerability

    		5.9
    MediumCVE-2026-25308

    WordPress Simple Membership plugin <= 4.6.9 - Broken Access Control vulnerability

    		4.3
    MediumCVE-2024-47354

    WordPress Simple Membership After Login Redirection plugin <= 1.6 - Open Redirection vulnerability

    		4.7
    MediumCVE-2024-49682

    WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability

    also in 1 other product

    		4.7

    Products

    Products by Wp.insider
    Simple Membership70
    Affiliates Manager40