RocketGeek CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM RocketGeek CVE published 2026-10-12

CVE-2026-61994

A Missing Authorization vulnerability in the WordPress WP-Members plugin allows attackers to exploit incorrectly configured access control security levels. This issue affects WP-Members versions from n/a through 3.5.7. The vulnerability can lead to unauthorized access and potential data breaches if not properly addressed. Defenders should assess their exposure and verify plugin versions to ensure they are [truncated]