Unknown Simple Membership vulnerabilities

6 CVEs affecting Unknown Simple Membership, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-88785, published 2026-10-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-11855, published 2026-07-06. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. The Simple Membership WordPress plugin before 4.7.5 does not verify the authenticity of Stripe webhook requests when no signing secret is configured, nor escape a value taken from them before…
CVE-2026-15930, published 2026-08-03. Critical severity, CVSS 9.4. EPSS: 0.4% chance of exploitation in the next 30 days. The Simple Membership WordPress plugin before 4.7.8 does not verify whether user creation failed during registration before using the returned value as a user ID to update an account, allowing…
CVE-2026-15931, published 2026-08-03. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. The Simple Membership WordPress plugin before 4.7.8 does not sanitise a subscriber name value received from an unauthenticated payment approval request, nor escape it when displaying it in the…
CVE-2026-88764, published 2026-09-13. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. The Simple Membership WordPress plugin before 4.7.8 does not validate that the membership level supplied in a PayPal payment notification matches the level configured for the paid payment button,…
CVE-2026-14936, published 2026-08-06. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. The Simple Membership WordPress plugin before 4.7.7 does not verify that a PayPal payment notification was sent to the site's own configured merchant account before activating a membership, allowing…
CVE-2026-88785, published 2026-10-11. Medium severity, CVSS 4.7. EPSS: 0.1% chance of exploitation in the next 30 days. The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration…