WordPress plugin
MemberDash security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High0
- Medium0
- Low0
All MemberDash vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | Unauthenticated Account Takeover via Insecure Direct Object Reference via 'id' Parameter ≤1.8.5Update to 1.8.6 | CVE-2026-16310 |
- Critical9.8Unauthenticated Account Takeover via Insecure Direct Object Reference via 'id' Parameter
≤1.8.5Update to 1.8.6
MemberDash: common questions
Does MemberDash have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in MemberDash: 1 critical. None are known to affect version null.
How do I check which version of MemberDash I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent MemberDash vulnerability?
CVE-2026-16310, published Sep 5, 2026: MemberDash <= 1.8.5 - Unauthenticated Account Takeover via Insecure Direct Object Reference via 'id' Parameter. Severity: Critical (CVSS 9.8).
Is any MemberDash vulnerability listed in CISA KEV?
No. None of the known MemberDash vulnerabilities is currently listed in the CISA KEV catalog.