All packages
Memberful - Membership Plugin vulnerabilities
3 known CVE vulnerabilities in Memberful - Membership Plugin, translated and rated.
- CVE-2026-103067High
The Memberful - Membership Plugin (memberful-wp) for WordPress is vulnerable to Cross-Site Request Forgery (CSRF). The issue affects versions from n/a through 1.81.0.
- CVE-2026-104401Medium
Exposure of sensitive system information vulnerability in Memberful - Membership Plugin up to version 1.81.2. Allows retrieval of embedded sensitive data.
- CVE-2025-58000Medium
The Memberful WordPress plugin (versions up to 1.75.0) has a missing authorization vulnerability, allowing access to functionality not properly constrained by ACLs.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS