qode_membership vulnerabilities

CVEs whose affected-version data names the qode_membership package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-92885Critical· 9.8

yesterday

Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Login

The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qode_membership_check_facebook_user AJAX action. This is due to a typograph…

▾ MidnightQode Themes · Qode MembershipEPSS 0.37%via CVEORG