MembershipWorks vulnerabilities

CVEs whose affected-version data names the MembershipWorks package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112355High· 7.5

yesterday

MembershipWorks WordPress Plugin < 6.17 Information Disclosure via WordPress REST API

The MembershipWorks plugin for WordPress before 6.17 contains an information disclosure vulnerability that allows unauthenticated attackers to access member-only content through the WordPress REST API. Because the filter that strips prot…

▾ TwilightMembershipWorks · MembershipWorksvia CVEORG