📦 Wp Members

The WP-Members Membership Plugin for WordPress has a stored cross-site scripting (XSS) vulnerability that allows unauthenticated attackers to inject malicious scripts via the X-Forwarded-For header. T...

This vulnerability allows authenticated WordPress users with Subscriber-level access or higher to inject malicious scripts into user profile fields. When other users view profiles containing these scr...

This vulnerability allows authenticated WordPress users with contributor-level access or higher to inject malicious scripts into website pages via the WP-Members Membership Plugin's shortcode. The inj...