A vulnerability was found in Membership Plugin up to 3.2.18 on WordPress and classified as problematic. This issue affects some unknown processing of the component Invoice Setting Handler. The manipulation results in cross site scripting.
This vulnerability is known as CVE-2026-1304. It is possible to launch the attack remotely. No exploit is available.
