Simple Membership

Vulnerabilities 29Slug simple-membershipLatest version 4.7.3WordPress.org →

Minimum safe version

4.7.2

Update to 4.7.2 or later to address 29 fixable vulnerabilities

Latest available4.7.3 ✓
N/A
2026-02-18< 4.7.1

Simple Membership <= 4.7.0 - Unauthenticated Improper Handling of Missing Values

WordfenceCVE
N/A
2026-03-31< 4.7.2

Simple Membership <= 4.7.1 - Missing Authorization

WordfenceCVE
High 7.1
2024-12-19< 4.3.9

WordPress Simple Membership Plugin <= 4.3.8 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfence
N/A
< 3.2.9

Simple Membership &lt;= 3.2.8 - Cross-Site Scripting (XSS)

WPScan
N/A
2016-07-14< 3.2.9

Simple Membership < 3.2.9 - Reflected Cross-Site Scripting

Wordfence
N/A
2021-04-05< 4.0.4

Simple Membership <= 4.0.3 - Authenticated (Admin+) SQL Injections

Wordfence
N/A
2016-07-14< 3.2.9

WordPress Simple Membership Plugin <= 3.2.8 - Cross Site Scripting (XSS)

Patchstack
N/A
2021-04-05< 4.0.4

WordPress Simple Membership plugin <= 4.0.3 - Authenticated SQL Injection (SQLi) vulnerability

PatchstackCVEWPScan
High 8.8
2019-07-29< 3.8.5

WordPress Simple Membership plugin <= 3.8.4 - Cross-Site Request Forgery (CSRF) vulnerability

PatchstackCVEWordfenceWPScan