PatchSiren cyber security CVE debrief
CVE-2026-34886 wp.insider CVE debrief
CVE-2026-34886 is a HIGH severity vulnerability with a CVSS score of 7.5. It is an Unauthenticated Broken Access Control issue affecting Simple Membership plugin versions <= 4.7.1.
- Vendor
- wp.insider
- Product
- Simple Membership
- CVSS
- HIGH 7.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-15
- Original CVE updated
- 2026-06-15
- Advisory published
- 2026-06-15
- Advisory updated
- 2026-06-15
Who should care
Users of Simple Membership plugin versions <= 4.7.1 should be aware of this vulnerability and take necessary actions to mitigate it.
Technical summary
The vulnerability has been described as CWE-862. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
Defensive priority
HIGH
Recommended defensive actions
- Update Simple Membership plugin to a version greater than 4.7.1.
- Refer to resourceLinkAnnotations for additional mitigation or vendor references: ref-4.
Evidence notes
The CVE was published on 2026-06-15T21:16:41.600Z and last modified on 2026-06-15T21:24:32.790Z.
Official resources
-
CVE-2026-34886 CVE record
CVE.org
-
CVE-2026-34886 NVD detail
NVD
-
Source item URL
nvd_modified
- Mitigation or vendor reference
CVE-2026-34886 was published on 2026-06-15T21:16:41.600Z.