Members – Membership & User Role Editor Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:supercleanse:members_–_membership_&_user_role_editor_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Supercleanse (d4f23f03-1181-550a-a2e9-178bfc3fc6a2) |
|---|---|
| Product | Members – Membership & User Role Editor Plugin (a53f43e2-94e6-526e-9152-d72b8eeff218) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-12426 |
vulnerable | 2026-07-29 00:23:32.323838 |
Members <= 3.2.22 - Unauthenticated Sensitive Information Disclosure via REST API Pagination Side Channel
MEDIUM (5.3)
The Members – Membership & User Role Editor Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.22 via the members_filter_protected_posts_for_rest. This makes it possible for unauthenticated attackers to extract determine the existence and exact count of access-restricted posts, and use per-page pagination as a boolean oracle to infer keywords and content contained within those hidden restricted posts.
Published: 2026-07-11T02:31:18.186Z
Updated: 2026-07-14T14:18:17.164Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11008 |
vulnerable | 2026-06-08 06:23:48.417349 |
Members <= 3.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
MEDIUM (5.3)
The Members – Membership & User Role Editor Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.10 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to higher-level roles such as administrator.
Published: 2024-12-11T10:57:29.270Z
Updated: 2026-04-08T16:35:41.828Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.