MemberPress has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 8.8 (high).
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.8
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
MemberPress vulnerabilities
CVEs affecting MemberPress, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-92797High· 8.8Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter
The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.14.1. This is due to a bypassable nonce verification check in the save_profile_fields() function that uses an isset() co…
▾ TwilightMemberPress · MemberpressEPSS 0.15%via CVEORG
CVE-2026-15451High· 8.8The MemberPress Corporate Accounts plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.39
The MemberPress Corporate Accounts plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.39. This is due to a mass assignment vulnerability in the 'add_sub_account_user' function that passes the…
▾ TwilightMemberPress · MemberPress Corporate AccountsEPSS 0.44%via NVD