CVE-2026-92797 | MemberPress Plugin up to 1.14.1 on WordPress save_profile_fields nonce cross-site request forgery

October 28, 2026 Yanac

A vulnerability labeled as problematic has been found in MemberPress Plugin up to 1.14.1 on WordPress. Affected by this issue is the function save_profile_fields. Executing a manipulation of the argument nonce can lead to cross-site request forgery.

This vulnerability is registered as CVE-2026-92797. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More