Memberful – Membership Plugin

Memberful – Membership Plugin has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.5 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (33%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Missing Authorization.

Every one of the 3 issues recorded for Memberful – Membership Plugin has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Memberful – Membership Plugin is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all Memberful – Membership Plugin vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2025-58000

Memberful <= 1.75.0 - Missing Authorization

Read the full analysis

Vulnerability Records

3 records
Memberful – Membership Plugin banner
Latestv1.81.0

Memberful – Membership Plugin

memberful

Author

memberful

4.7(13)
94/100
Last Updated
2026-08-07 (1mo ago)
Active Installs
1,000+
Downloads
209,698
Requires WP
6.3+
Requires PHP
7.4+
Tested up to
WP 6.9.7
Created
2013-10-21 (13y ago)

Memberful is a best-in-class membership software and WordPress plugin used by some of the web’s biggest creators, publishers, and independent media companies. Generate reliable, recurring revenue by selling subscription plans while protecting access to your content. Memberful allows you to maintain full control and ownership of your audience, your brand, and your business. Protect Content Protect members-only content and select which subscribers get access to gated areas of your website using server-side content protection. Restrict access to content based on membership level and protect specific posts or pages right from your WordPress edit screen. Manage access to media including blog articles, in-house newsletters, private podcasts, protected downloads, and more. Integrations Built-in integrations with popular third-party services including Mailchimp, Discord, ConvertKit, Klaviyo, and Google Analytics. Add new custom applications or develop your own using the Memberful API. Utilize webhooks to trigger when important events happen on your site, such as when a member changes their payment/tax details. Integrate with popular ad providers to disable ads based on user subscription plans and user status. Membership Management Automatically sync your Memberful membership data to WordPress or import a list of your existing members. Add multiple staff users and manage their account permissions. Utilize built-in analytics dashboards to monitor and grow your business. Payment and Plans Easily accept payments through your Stripe account. Streamlined member checkout process with Single-Sign-On (SSO) and Apple & Google Pay integration. Create multiple membership plans and upgrades to allow tiered access to different areas of your website. Discounts, Referrals, and Retention bonuses to incentivize sign-ups and membership upgrades. Enable automatic tax calculations based on where you and your members are located.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C