Memberlite Shortcodes

Memberlite Shortcodes has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (75%). Other recurring categories include Improper Neutralization Of Script-Related HTML Tags In A Web Page (Basic XSS).

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

4 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage75%

Open

Fixed

Get automatic notifications for all Memberlite Shortcodes vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-48087

Memberlite Shortcodes <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

4 records


2025-10-17 00:00	Memberlite Shortcodes <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Memberlite Shortcodes <= 1.4.1	`CVE-2025-48087`	6.4 Medium	zaim	No
2025-09-16 14:11	Memberlite Shortcodes <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Memberlite Shortcodes <= 1.4	`CVE-2025-10125`	6.4 Medium	Gilang - DJ	Yes
2024-11-22 21:03	Memberlite Shortcodes <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via memberlite_accordion Shortcode Memberlite Shortcodes <= 1.3.9	`CVE-2024-11227`	6.4 Medium	Peter Thaleikis	Yes
2023-09-21 00:00	Memberlite Shortcodes <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Memberlite Shortcodes < 1.3.9	`CVE-2023-5237`	6.4 Medium	Dmitrii Ignatyev	Yes

Showing 1–4 of 4 reports