Vulnerabilities

TI-2024-12766 CVE-2024-13727 · GHSA-qp9v-5v7f-q6f8

MemberSpace – Membership Plugin and Paid Subscriptions < 2.1.14 - Reflected XSS

MEDIUM 60

The MemberSpace WordPress plugin before 2.1.14 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00626 Published 2025-05-15 Fixed in 2.1.14 CWE-79

TI-2025-19745 CVE-2025-26874 · GHSA-6638-q8q5-j5h6

WordPress MemberSpace plugin <= 2.1.13 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in memberspace MemberSpace memberspace allows Reflected XSS.This issue affects MemberSpace: from n/a through <= 2.1.13.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00228 Published 2025-03-27 No fix listed CWE-79

Vulnerabilities

Filters

MemberSpace – Membership Plugin and Paid Subscriptions < 2.1.14 - Reflected XSS

WordPress MemberSpace plugin <= 2.1.13 - Reflected Cross Site Scripting (XSS) vulnerability