Wpcom - vulnerabilities (CVEs)

3 CVEs in 2 products, 0 in the last 30 days, newest from 2025-03-14.

Products

• Wpcom Member - 3 CVEs
• Wpcom-member - 1 CVEs

Newest CVEs of Wpcom

• CVE-2025-2221 - CVSS 7.5 (high), 2025-03-14: The WPCOM Member plugin for WordPress is vulnerable to time-based SQL Injection via the ‘user_phone’ parameter in all versions up to, and including, 1.7.6 due…
• CVE-2024-47378 - CVSS 7.1 (high), 2024-10-05: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lomu WPCOM Member wpcom-member allows Reflected XSS.This…
• CVE-2024-7493 - CVSS 9.8 (critical), 2024-09-06: The WPCOM Member plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.5.2.1. This is due to the plugin allowing…