How many wp.insider Simple Membership CVEs are in CISA KEV?

None of wp.insider Simple Membership's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of wp.insider Simple Membership are affected?

20 distinct wp.insider Simple Membership versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in wp.insider Simple Membership CVEs?

wp.insider Simple Membership's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).

What is the average severity of wp.insider Simple Membership CVEs?

The average CVSS base score across wp.insider Simple Membership's scored CVEs is 6.1.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

wp.insider

5 CVEs

wp.insider Simple Membership Vulnerabilities

Name: wp.insider Simple Membership vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Simple Membership by wp.insider.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.1

Avg CVSS

2024–2026

Last updated June 15, 2026

Overview

wp.insider Simple Membership has 5 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting wp.insider Simple Membership, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of wp.insider Simple Membership's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of wp.insider Simple Membership's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No wp.insider Simple Membership CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every wp.insider Simple Membership version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 4.5.31 CVE
<= 4.6.31 CVE
<= 4.6.91 CVE
<= 4.7.11 CVE
<= 4.7.21 CVE
>= 4.5.41 CVE
>= 4.6.41 CVE
>= 4.7.01 CVE
>= 4.7.21 CVE
>= 4.7.31 CVE

Fixed in

> 4.5.31 CVE
> 4.6.31 CVE
> 4.6.91 CVE
> 4.7.11 CVE
> 4.7.21 CVE
4.5.41 CVE
4.6.41 CVE
4.7.01 CVE
4.7.21 CVE
4.7.31 CVE

Find a version

5 CVEs

Sort

WordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42663
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (6th pct)2026-06-15
WordPress Simple Membership plugin <= 4.7.1 - Broken Access Control vulnerability
CVE-2026-34886
Patch
CWE-862
High · CVSS 7.5
EPSS 0.3% (17th pct)2026-06-15
WordPress Simple Membership plugin <= 4.6.9 - Broken Access Control vulnerability
CVE-2026-25308
Patch
CWE-862
Medium · CVSS 4.3
EPSS 0.2% (8th pct)2026-02-19
WordPress Simple Membership plugin <= 4.6.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49333
Patch
CWE-79
Medium · CVSS 5.9
EPSS 0.2% (8th pct)2025-06-06
WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability
CVE-2024-49682
Patch
CWE-601
Medium · CVSS 6.1
EPSS 0.3% (17th pct)2024-10-24

Common weakness types

The CWE weakness categories most often found in wp.insider Simple Membership CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many wp.insider Simple Membership CVEs were published each year.

2024

1

2025

1

2026

3

Other wp.insider products

Browse vulnerabilities for other products by wp.insider.

Affiliates Manager2 CVEs Simple Membership After Login Redirection1 CVEs Simple Membership Custom Messages1 CVEs Simple Membership WP user Import1 CVEs

All wp.insider vulnerabilities

Frequently asked questions

Common questions about wp.insider Simple Membership vulnerabilities.

How many CVEs does wp.insider Simple Membership have?: wp.insider Simple Membership has 5 published CVE records since 2024.
How many wp.insider Simple Membership CVEs are in CISA KEV?: None of wp.insider Simple Membership's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for wp.insider Simple Membership vulnerabilities?: No wp.insider Simple Membership CVEs currently have a tracked public exploit in this dataset.
Which versions of wp.insider Simple Membership are affected?: 20 distinct wp.insider Simple Membership versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in wp.insider Simple Membership CVEs?: wp.insider Simple Membership's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).
What is the average severity of wp.insider Simple Membership CVEs?: The average CVSS base score across wp.insider Simple Membership's scored CVEs is 6.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track wp.insider Simple Membership vulnerabilities

Monitor new wp.insider Simple Membership vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing