Simple Membership WP user Import

Simple Membership WP user Import has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include SQL Injection.

Every one of the 2 issues recorded for Simple Membership WP user Import has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Simple Membership WP user Import is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

5.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Simple Membership WP user Import vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2023-0254

Simple Membership WP user Import <= 1.7 - Authenticated (Admin+) SQL Injection

Read the full analysis

Vulnerability Records

2 records


2026-01-20 00:00	Simple Membership WP user Import <= 1.9.1 - Cross-Site Request Forgery Simple Membership WP user Import <= 1.9.1	`CVE-2026-24986`	4.3 Medium	Nabil Irawan	Yes
2023-01-12 00:00	Simple Membership WP user Import <= 1.7 - Authenticated (Admin+) SQL Injection Simple Membership WP user Import <= 1.7	`CVE-2023-0254`	7.2 High	Etan Imanol Castro Aldrete	Yes

Showing 1–2 of 2 reports

Plugin Profile

Latestv1.9.2

Simple Membership WP user Import

Author

wp.insider

5.0(2)

100/100

Last Updated

2026-08-21 (23d ago)

Active Installs

4,000+

Downloads

62,108

Requires WP

4.0+

Requires PHP

Tested up to

WP 7.1

Created

2014-09-01 (12y ago)

This addon allows you to import your existing WordPress users into the simple membership plugin as members. You will be able to select which membership access level a user goes into when importing the users. This addon requires the Simple Membership Plugin. After you install this addon, go to the import users interface and select the option to import.

View on WordPress.org