CVE-2026-28073: Tips And Tricks Hq Wp Emember

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tips and Tricks HQ WP eMember allows Reflected XSS.This issue affects WP eMember: from n/a through v10.2.2.

Affected products

• Tips And Tricks Hq Wp Emember: up to and including v10.2.2

Published 2026-03-19. Last modified 2026-06-17.