CVE Catalog
CVE-2026-54811
CriticalCVSS 9.3Summary
There is an unauthenticated SQL Injection vulnerability in WP eMember versions below 10.9.4.
Risk Assessment
An attacker could exploit this vulnerability to gain access to sensitive data in the database, potentially leading to serious security breaches.
Recommendation
It is recommended to update WP eMember to version 10.9.4 or later to mitigate this vulnerability.
Original NVD description (English source)
Unauthenticated SQL Injection in WP eMember < v10.9.4 versions.