Skip to content
OpenAdvisories
High · 7.1 CVE-2025-68844 EUVD-2025-207593GHSA-2whc-3gm8-r8v3

WordPress Membee Login plugin <= 2.3.6 - Cross Site Scripting (XSS) vulnerability

Published Feb 20, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DaleAB Membee Login membees-member-login-widget allows Reflected XSS.This issue affects Membee Login: from n/a through <= 2.3.6.

Affected products

VendorProductAffectedFixed
DaleAB Membee Login ≤ 2.3.6 —

References