Known Vulnerabilities for Membership by Ithemes
Listed below are 1 of the newest known vulnerabilities associated with "Membership" by "Ithemes".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-105687 json | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-team-member RPC allows a team administr... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-105632 json | Plane is an open-source project management tool. Prior to 1.4.0, the GraphQL joinProject mutation lets any workspace member a... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105631 json | Plane is an open-source project management tool. Prior to 1.4.0, WorkspaceFileAssetEndpoint.get and WorkspaceAssetDownloadEnd... | Not Provided | 2026-10-05 | 2026-10-07 |
| CVE-2026-104975 json | Plane is an open-source project management tool. Prior to 1.4.0, Plane's dashboard asset endpoints in plane/app/views/asset/v... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-104968 json | Plane is an open-source project management tool. Prior to 1.4.0, GET /api/workspaces/{slug}/entity-search/?query_type=user_me... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-104966 json | Plane is an open-source project management tool. Prior to 1.4.0, two endpoint families fail to verify that nested resource id... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-104844 json | PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it. Prior to 7.1.6, src/pa... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-104443 json | YesWiki before 4.6.7 contains an empty-filter scope bypass in the triples delete API that allows any authenticated user to de... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-104401 json | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Memberful Memberful - Membership ... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-103858 json | MISP contains an incomplete authorization check in the discussion posting functionality. When a user submits a post to a thre... | Not Provided | 2026-10-01 | 2026-10-01 |