GCVE - cpe:2.3:a:caseproof,_llc:memberpress:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:caseproof,_llc:memberpress:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Caseproof, Llc (`0660bc3d-b736-53cf-ad8e-beac89335baf`)
Product	Memberpress (`032bbd44-6e2c-5480-9757-8b65295e3a76`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-39407`	vulnerable	2026-06-08 07:23:06.515070	WordPress Memberpress plugin < 1.12.0 - Reflected Cross Site Scripting (XSS) vulnerability HIGH (7.1) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Caseproof, LLC Memberpress allows Reflected XSS.This issue affects Memberpress: from n/a before 1.12.0. Published: 2025-05-19T19:06:22.751Z Updated: 2026-04-28T16:12:30.307Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/memberpress/vulnerability/wordpress-memberpress-plugin-1-11-37-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-43956`	vulnerable	2026-06-08 06:45:53.297228	WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerability MEDIUM (6.5) Missing Authorization vulnerability in Caseproof, LLC Memberpress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Memberpress: from n/a through 1.11.34. Published: 2024-11-01T14:17:16.805Z Updated: 2026-04-28T16:10:14.347Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/memberpress/wordpress-memberpress-plugin-1-11-29-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.