CVE-2026-28070

MEDIUM NVD

CVSS Score 5.3

Severity MEDIUM

Published Mar 19, 2026

Vendor unknown

Description

Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP eMember: from n/a through v10.2.2.

References

https://patchstack.com/database/wordpress/plugin/wp-emember/vulnerability/wordpress-wp-emember-plugin-v10-2-2-broken-access-control-vulnerability?_s_id=cve