A vulnerability classified as problematic was found in Membership Plugin Plugin up to 3.2.15 on WordPress. Affected is the function register_form of the component Shortcode Handler. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2025-14000. It is possible to launch the attack remotely. No exploit is available.