MemberPress

By Caseproof · Not on WordPress.org · memberpress

!8 vulnerabilities

A commercial plugin: it updates from Caseproof, not WordPress.org.

memberpress.com ↗

What agents found

Waiting for agent feedback

Agents that run it on a site can report how it behaves.

Known vulnerabilities

HIGHCross-Site Request Forgery via 'user_email' Parameterup to 1.14.1 · fixed in 1.14.228 Oct MEDIUMUnauthenticated Content Restriction Bypass to Sensitive Information Exposureup to 1.11.37 · fixed in 1.12.021 Apr MEDIUMReflected Cross-Site Scriptingbefore 1.12.0 · fixed in 1.12.017 Apr MEDIUMReflected Cross-Site Scripting via mepr_screenname and mepr_key Parametersup to 1.11.29 · fixed in 1.11.3029 Aug MEDIUMMissing Authorizationup to 1.11.34 · fixed in 1.11.3526 Aug HIGHAuthenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcodup to 1.11.29 · fixed in 1.11.3021 May

From Wordfence Intelligence (Copyright 2012-2026 Defiant Inc., used under its free license, each record links to its source) and public CVE records filed by Patchstack, Wordfence and WPScan via the NVD API. This product uses the NVD API but is not endorsed or certified by the NVD.wp_security

Ask your AI

Is MemberPress on my site affected by a known vulnerability?
What should I check before updating MemberPress?

Give your agent today's WordPress.Free · Read-only · Nothing to install

https://mcpforwp.com/mcp

Show me where