CVE-2026-97337 | wpinsider-1 Simple Membership Plugin up to 4.8.3 on WordPress Email Activation check_and_do_email_activation email information disclosure

October 3, 2026 Yanac

A vulnerability marked as problematic has been reported in wpinsider-1 Simple Membership Plugin up to 4.8.3 on WordPress. The impacted element is the function SwpmInitTimeTasks::check_and_do_email_activation of the component Email Activation. Performing a manipulation of the argument email results in information disclosure.

This vulnerability is reported as CVE-2026-97337. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More