The wp-eMember WordPress plugin before v10.7.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Wp Emember Plugin | — | Update wp-eMember plugin to version 10.7.0, or a newer patched version | May 15, 2025 | Jul 15, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub