CVE-2026-103067

A Cross-Site Request Forgery (CSRF) vulnerability in the Memberful Membership Plugin for WordPress allows attackers to perform unauthorized actions on behalf of authenticated users. This could lead to unauthorized access or manipulation of user accounts, potentially compromising sensitive information. Users of the Memberful plugin, particularly those running versions up to 1.81.0, should prioritize applying security updates to mitigate this risk.