=============================================
1.1 Description
All input fields from registered users aren't properly escaped. This could lead to an XSS attack that could possibly affect all visitors of the website, including administators.
1.2 Proof of Concept
1.3 Actions taken after discovery
Vendor was informed on 2015/05/19.
1.4 Solution
No official solution yet exists.
=============================================
2.1 Description
Registered users can publish a post without administrator confirmation. Normally all posts submitted by users registered with WP Membership plugin are stored with the status `pending`. A malicious user though can publish his post by crafting the form is used for submission.
2.2 Proof of Concept
The post gets immediately published after you submit the form and is visible to all visitors of the website.
In addition a stored XSS attack can be performed due to insufficient escaping of the post content input.
2.3 Actions taken after discovery
Vendor was informed on 2015/05/19.
2.4 Solution
No official solution yet exists.
2.5 Workaround
Prevent users from submitting new posts through the relative option in plugin's settings