CVE Catalog
CVE-2026-54811
CriticalCVSS 9.3Summary
There is an unauthenticated SQL Injection vulnerability in WP eMember versions below 10.9.4.
Risk Assessment
An attacker could exploit this vulnerability to gain access to sensitive data in the database, potentially leading to serious security breaches.
Recommendation
It is recommended to update WP eMember to version 10.9.4 or later to mitigate this vulnerability.
Other vulnerabilities in WP eMember
Original NVD description (English source)
Unauthenticated SQL Injection in WP eMember < v10.9.4 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS