CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-28070

WordPress WP eMember plugin <= v10.2.2 - Broken Access Control vulnerability

Status: Published
Published: 2026-03-19
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP eMember: from n/a through v10.2.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tips and Tricks HQ WP eMember

Default version status: unaffected

n/a to ≤ v10.2.2affected

References

https://patchstack.com/database/wordpress/plugin/wp-emember/vulnerability/wordpress-wp-emember-plugin-v10-2-2-broken-access-control-vulnerability?_s_id=cve ↗