GCVE - cpe:2.3:a:tips_and_tricks_hq:wp_emember:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tips_and_tricks_hq:wp_emember:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Tips And Tricks Hq (`51b2aeda-c511-5c79-ad82-e39635a8cf5d`)
Product	Wp Emember (`ab0fab44-6afd-5a64-8830-7d286ea9b99e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-49077`	vulnerable	2026-06-08 08:05:12.399395	WordPress WP eMember plugin <= v10.2.2 - Sensitive Data Exposure vulnerability MEDIUM (5.3) Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMember allows Retrieve Embedded Sensitive Data. This issue affects WP eMember: from n/a through v10.2.2. Published: 2026-06-04T10:49:13.375Z Updated: 2026-06-04T15:06:55.581Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/wp-emember/vulnerability/wordpress-wp-emember-plugin-v10-2-2-sensitive-data-exposure-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-28073`	vulnerable	2026-06-08 07:55:14.886295	WordPress WP eMember theme <= v10.2.2 - Reflected Cross Site Scripting (XSS) vulnerability HIGH (7.1) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tips and Tricks HQ WP eMember allows Reflected XSS.This issue affects WP eMember: from n/a through v10.2.2. Published: 2026-03-19T05:18:56.777Z Updated: 2026-04-28T16:15:06.683Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/wp-emember/vulnerability/wordpress-wp-emember-theme-v10-2-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-28070`	vulnerable	2026-06-08 07:55:14.884248	WordPress WP eMember plugin <= v10.2.2 - Broken Access Control vulnerability MEDIUM (5.3) Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP eMember: from n/a through v10.2.2. Published: 2026-03-19T05:20:03.784Z Updated: 2026-04-28T16:15:06.675Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/wp-emember/vulnerability/wordpress-wp-emember-plugin-v10-2-2-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-5744`	vulnerable	2026-06-08 06:56:17.235353	WP eMember < 10.6.7 - Reflected XSS The wp-eMember WordPress plugin before 10.6.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers Published: 2024-07-13T06:00:13.171Z Updated: 2024-08-01T21:18:07.071Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/ba50e25c-7250-4025-a72f-74f8eb756246/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-5077`	vulnerable	2026-06-08 06:56:14.789527	WP eMember < 10.6.6 - Stored XSS in Blacklist via CSRF The wp-eMember WordPress plugin before 10.6.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack Published: 2024-07-13T06:00:09.142Z Updated: 2024-08-01T21:03:10.588Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/00fcbcf3-41ee-45e7-a0a9-0d46cb7ef859/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.