Sensitive Data Exposure in Memberful Membership Plugin by Memberful

CVE-2026-104401

What is CVE-2026-104401?

A vulnerability has been identified in the Memberful Membership Plugin that allows unauthorized users to retrieve sensitive embedded data within the system. This issue affects all versions of the plugin up to and including 1.81.2. The exposure could lead to unauthorized access to personal and sensitive information, posing significant risks to user security and privacy. It is crucial for users of this plugin to assess their risk and implement necessary security measures to mitigate potential threats.

References