Vulnerabilities / Simple Membership / WPSEC-2026-2865
Simple Membership <= 4.8.7 - Unauthenticated Sensitive Information Exposure via Protected Post Comments
Medium 5.3
CWE-200Fixed in 4.8.8
- ID
- WPSEC-2026-2865
- Plugin
- Simple Membership (simple-membership)
- Affected
- all versions before 4.8.8
- Remediation
- Update to 4.8.8 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weakness
- CWE-200
- Usage
- Plugin Medium · Affected versions Medium among sites WPSec scans, 2026-11-12
- Attack surface
- Simple Membership on WPSec AttackSurface
- Fix released
- Published
Description
The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure via the comment protection feature in all versions up to, and including, 4.8.7, due to the comment_text filter checking access only against the global $comment variable. Renderers that do not set that variable, such as the Comment Content block of block themes (for example, Twenty Twenty-Five) and the REST API comments endpoint, therefore skip the check. This makes it possible for unauthenticated attackers to read comments on posts and pages restricted to members.
References
- https://wpsec.com/vuln/WPSEC-2026-2865/
- https://plugins.svn.wordpress.org/simple-membership/tags/4.8.8/
- https://wordpress.org/plugins/simple-membership/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS