Cross-site Scripting Vulnerability in WP-Members by Chad Butler

CVE-2025-50051

What is CVE-2025-50051?

The WP-Members plugin by Chad Butler is susceptible to a Cross-site Scripting (XSS) vulnerability, allowing attackers to inject malicious scripts into web pages. This issue can lead to stored XSS attacks where the injected code is executed in the context of the affected user's session. The vulnerability affects versions from n/a through 3.5.4, posing significant security risks to websites utilizing this plugin. Administrators are advised to update to the latest version and implement security measures to mitigate potential exploits.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References