membership management system vulnerabilities and fixes

Recent CVEs affecting membership management system, with upgrade or downgrade steps. 19 tracked.

Also searched as: membershipmanagementsystem.

membership management system has 19 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-02-18. Highest priority: CVE-2025-70150 (score 61/100).

• CVE-2025-70150 CRITICAL 9.8 DOWNGRADE CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.p
• CVE-2025-70149 CRITICAL 9.8 DOWNGRADE CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the
• CVE-2025-70148 HIGH 7.5 DOWNGRADE Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management Syste
• CVE-2025-3998 HIGH 7.3 DOWNGRADE A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0
• CVE-2024-48709 MEDIUM 5.4 DOWNGRADE CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the membershipType
• CVE-2024-46472 HIGH 8.6 DOWNGRADE CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Log
• CVE-2024-46471 HIGH 7.5 DOWNGRADE The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure
• CVE-2024-46470 MEDIUM 6.1 DOWNGRADE Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malic
• CVE-2024-46236 MEDIUM 5.4 DOWNGRADE CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the address parame
• CVE-2024-45528 MEDIUM 5.4 DOWNGRADE CodeAstro MembershipM-PHP (aka Membership Management System in PHP) 1.0 allows add_members.php fullname stored
• CVE-2024-2333 MEDIUM 6.3 DOWNGRADE A vulnerability classified as critical has been found in CodeAstro Membership Management System 1.0
• CVE-2024-2149 MEDIUM 4.7 DOWNGRADE A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0
• CVE-2024-25869 HIGH 8.8 DOWNGRADE An Unrestricted File Upload vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remo
• CVE-2024-25868 MEDIUM 6.1 DOWNGRADE A Cross Site Scripting (XSS) vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a rem
• CVE-2024-25867 CRITICAL 9.1 DOWNGRADE A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker
• CVE-2024-25866 HIGH 8.8 DOWNGRADE A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker
• CVE-2024-1924 MEDIUM 6.3 DOWNGRADE A vulnerability was found in CodeAstro Membership Management System 1.0
• CVE-2024-1819 MEDIUM 4.7 DOWNGRADE A vulnerability was found in CodeAstro Membership Management System 1.0
• CVE-2024-1818 MEDIUM 4.7 DOWNGRADE A vulnerability was found in CodeAstro Membership Management System 1.0 and classified as critical

FAQ

How do I fix membership management system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is membership management system being exploited right now?

None of the tracked membership management system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which membership management system CVE should I patch first?

CVE-2025-70150 currently ranks highest (61/100): CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.p.

RSS feed for membership management system · ← Back to latest CVEs