Now officially on WordPress.org

CVE Database / CVE-2026-42663

CVE · Medium

CVE-2026-42663 — Simple Membership [simple-membership] < 4.7.3

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-42663 Simple Membership [simple-membership] < 4.7.3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 6.5 < 4.7.3 4.7.3 2026-05-03 —

CVE-2026-42663

The Simple Membership plugin for WordPress contains a security flaw in versions up to 4.7.2, which allows malicious code to be embedded into the site without authorization. This vulnerability enables unauthorized parties to insert executable script content on certain web pages, triggering execution when users access those pages.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings