CVE-2023-0514

MEDIUM 6.1CVE-2023-0514 · Published 08/05/2023 · updated 17/06/2026

In short

CVE-2023-0514 is a MEDIUM (CVSS 6.1) vulnerability affecting membership database (membership database project).
Chance of exploitation in the next 30 days (EPSS): 0.85%, higher than 58.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
membership database membership_database_project	`≤ 1.0`	No fix yet

Description

The Membership Database WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

References

wpscan.com/vulnerability/c6cc400a-9bfb-417d-9206-5582a49d0f05 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free