WordPress plugin
Indeed Membership Pro security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 10 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical3
- High4
- Medium3
- Low0
All Indeed Membership Pro vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.1 | Unauthenticated PHP Object Injection ≤12.7Update to 12.8 | CVE-2024-43242 | |
| Critical9.8 | Unauthenticated Privilege Escalation ≤12.7Update to 12.8 | CVE-2024-43240 | |
| High8.8 | Cross-Site Request Forgery <8.6.2Update to 8.6.2 | — | |
| High8.8 | Cross-Site Request Forgery <8.7Update to 8.7 | — | |
| Critical9.8 | 8.6 - Authentication Bypass 7.3 – <8.6.1Update to 8.6.1 | CVE-2020-36832 | |
| High8.3 | Remote Image File Inclusion ≤7.5Update to 7.6 | — | |
| Critical9.8 | Arbitrary File Upload ≤7.5Update to 7.6 | — |
- High8.1Unauthenticated PHP Object Injection
≤12.7Update to 12.8
- Critical9.8Unauthenticated Privilege Escalation
≤12.7Update to 12.8
- High8.8Cross-Site Request Forgery
<8.6.2Update to 8.6.2
- High8.8Cross-Site Request Forgery
<8.7Update to 8.7
- Critical9.88.6 - Authentication Bypass
7.3 – <8.6.1Update to 8.6.1
- High8.3Remote Image File Inclusion
≤7.5Update to 7.6
- Critical9.8Arbitrary File Upload
≤7.5Update to 7.6
Indeed Membership Pro: common questions
Does Indeed Membership Pro have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in Indeed Membership Pro: 3 critical, 4 high, 3 medium. None are known to affect version null.
How do I check which version of Indeed Membership Pro I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Indeed Membership Pro vulnerability?
CVE-2026-25357, published Mar 23, 2026: Indeed Membership Pro <= 13.7 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Indeed Membership Pro vulnerability listed in CISA KEV?
No. None of the known Indeed Membership Pro vulnerabilities is currently listed in the CISA KEV catalog.