Members Plugin <= 3.5.4.2 Cross Site Scripting (XSS) Vulnerability
22 September, 2025
Members Membership Plugin plugin <= 3.5.4.2 Authenticated (Subscriber+) Arbitrary Shortcode Execution via Profile Names vulnerability
8 September, 2025
Members plugin <= 3.5.4.1 Authenticated (Contributor+) Stored CrossSite Scripting vulnerability
21 July, 2025
Members plugin <= 3.5.4 Cross Site Scripting (XSS) Vulnerability
19 June, 2025
Members plugin <= 3.5.2 Authenticated (Contributor+) Stored CrossSite Scripting via wpmem_user_memberships Shortcode vulnerability
16 May, 2025