CVE Database /
CVE-2025-49333
CVE · Medium
CVE-2025-49333 — Simple Membership [simple-membership] < 4.6.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-49333
|
Simple Membership [simple-membership] < 4.6.4 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.9
|
< 4.6.4
|
4.6.4 |
2025-06-05 |
—
|
CVE-2025-49333
The Simple Membership plugin for WordPress contains a security flaw affecting versions up to 4.6.3, which allows malicious users with elevated access to inject harmful code into certain pages that will be executed when visited by other users. This vulnerability is only relevant in multi-site configurations or environments where unfiltered HTML has been restricted.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings