A vulnerability was found in wp.insider Simple Membership Plugin up to 4.6.9 on WordPress and classified as critical. The affected element is an unknown function. The manipulation results in missing authorization.
This vulnerability is known as CVE-2026-25308. It is possible to launch the attack remotely. No exploit is available.
