How many whyun WPCOM Member CVEs are in CISA KEV?

None of whyun WPCOM Member's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of whyun WPCOM Member are affected?

10 distinct whyun WPCOM Member versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in whyun WPCOM Member CVEs?

whyun WPCOM Member's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication), CWE-269 (Improper Privilege Management), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')).

How many critical whyun WPCOM Member vulnerabilities are there?

whyun WPCOM Member has 2 critical and 3 high-severity CVEs.

What is the average severity of whyun WPCOM Member CVEs?

The average CVSS base score across whyun WPCOM Member's scored CVEs is 8.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

whyun

5 CVEs

whyun WPCOM Member Vulnerabilities

Name: whyun WPCOM Member vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for WPCOM Member by whyun.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.8

Avg CVSS

2024–2025

Last updated December 16, 2025

Overview

whyun WPCOM Member has 5 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting whyun WPCOM Member, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of whyun WPCOM Member's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High3

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of whyun WPCOM Member's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No whyun WPCOM Member CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every whyun WPCOM Member version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 1.5.2.11 CVE
<= 1.7.141 CVE
<= 1.7.161 CVE
<= 1.7.51 CVE
<= 1.7.61 CVE

Fixed in

> 1.5.2.11 CVE
> 1.7.141 CVE
> 1.7.161 CVE
> 1.7.51 CVE
> 1.7.61 CVE

Find a version

5 CVEs

Sort

WPCOM Member <= 1.7.16 - Authentication Bypass via Weak OTP
CVE-2025-14002
Patch
CWE-287
High · CVSS 8.1
EPSS 0.5% (37th pct)2025-12-16
WPCOM Member <= 1.7.14 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2025-11920
Patch
CWE-98
High · CVSS 8.8
EPSS 0.5% (42th pct)2025-11-01
WPCOM Member <= 1.7.6 - Unauthenticated Time-Based SQL Injection
CVE-2025-2221
Patch
CWE-89
High · CVSS 7.5
EPSS 1.7% (75th pct)2025-03-14
WPCOM Member <= 1.7.5 - Authentication Bypass via 'user_phone'
CVE-2025-1475
Patch
CWE-287
Critical · CVSS 9.8
EPSS 0.6% (45th pct)2025-03-07
WPCOM Member <= 1.5.2.1 - Unauthenticated Privilege Escalation via User Meta
CVE-2024-7493
Patch
CWE-269
Critical · CVSS 9.8
EPSS 0.6% (44th pct)2024-09-06

Common weakness types

The CWE weakness categories most often found in whyun WPCOM Member CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many whyun WPCOM Member CVEs were published each year.

2024

1

2025

4

Other whyun products

Browse vulnerabilities for other products by whyun.

All whyun vulnerabilities

Frequently asked questions

Common questions about whyun WPCOM Member vulnerabilities.

How many CVEs does whyun WPCOM Member have?: whyun WPCOM Member has 5 published CVE records since 2024.
How many whyun WPCOM Member CVEs are in CISA KEV?: None of whyun WPCOM Member's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for whyun WPCOM Member vulnerabilities?: No whyun WPCOM Member CVEs currently have a tracked public exploit in this dataset.
Which versions of whyun WPCOM Member are affected?: 10 distinct whyun WPCOM Member versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in whyun WPCOM Member CVEs?: whyun WPCOM Member's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication), CWE-269 (Improper Privilege Management), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')).
How many critical whyun WPCOM Member vulnerabilities are there?: whyun WPCOM Member has 2 critical and 3 high-severity CVEs.
What is the average severity of whyun WPCOM Member CVEs?: The average CVSS base score across whyun WPCOM Member's scored CVEs is 8.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track whyun WPCOM Member vulnerabilities

Monitor new whyun WPCOM Member vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing