Skip to content
Threat Feed
Subscribe

Vendor

MembershipWorks

1 brief RSS
high threat

MembershipWorks WordPress Plugin: Information Disclosure (CVE-2026-112355)

The MembershipWorks WordPress plugin prior to version 6.17 fails to enforce content protection filters on WordPress REST API requests, allowing unauthenticated attackers to retrieve restricted member-only content.

MembershipWorks wordpress vulnerability information-disclosure rest-api
1t 1c