{"id":"CVE-2026-14848","aliases":["EUVD-2026-52586","GHSA-8hc5-48cx-v7wp"],"status":"published","title":"Paid Member Subscriptions \u003c 3.0.8 - Subscriber+ Cross-User Subscription Hijack via process_checkout","description":"The Paid Membership Subscriptions  WordPress plugin before 3.0.8 does not verify that the subscription being modified through its change-subscription checkout belongs to the current user, allowing any authenticated user with Subscriber-level access and above to take over another member's subscription and overwrite its plan, status and expiration.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00287,"percentile":0.21435,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2026-08-04T06:00:10Z","modified":"2026-08-26T16:31:16Z","products":[{"vendor":"unknown","product":"paid membership subscriptions"}],"references":[{"url":"https://wpscan.com/vulnerability/da2ae315-a534-4ae2-a8e8-61121613437b/","tags":["exploit","vdb-entry","technical-description"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14848"},{"url":"https://wpscan.com/vulnerability/da2ae315-a534-4ae2-a8e8-61121613437b"},{"url":"https://github.com/advisories/GHSA-8hc5-48cx-v7wp"}],"sources":{"cve":[{"id":"CVE-2026-14848","title":"Paid Member Subscriptions \u003c 3.0.8 - Subscriber+ Cross-User Subscription Hijack via process_checkout","description":"The Paid Membership Subscriptions  WordPress plugin before 3.0.8 does not verify that the subscription being modified through its change-subscription checkout belongs to the current user, allowing any authenticated user with Subscriber-level access and above to take over another member's subscription and overwrite its plan, status and expiration.","status":"published","published":"2026-08-04T06:00:10.035Z","modified":"2026-08-04T17:32:15.169Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T13:38:32.13011Z"}],"euvd":[{"id":"EUVD-2026-52586","description":"The Paid Membership Subscriptions  WordPress plugin before 3.0.8 does not verify that the subscription being modified through its change-subscription checkout belongs to the current user, allowing any authenticated user with Subscriber-level access and above to take over another member's subscription and overwrite its plan, status and expiration.","status":"published","published":"2026-08-04T06:00:10Z","modified":"2026-08-04T17:32:15Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T18:02:22.965583Z"}],"ghsa":[{"id":"GHSA-8hc5-48cx-v7wp","title":"The Paid Membership Subscriptions  WordPress plugin before 3.0.8 does not verify that the...","description":"The Paid Membership Subscriptions  WordPress plugin before 3.0.8 does not verify that the subscription being modified through its change-subscription checkout belongs to the current user, allowing any authenticated user with Subscriber-level access and above to take over another member's subscription and overwrite its plan, status and expiration.","status":"published","published":"2026-08-04T09:31:34Z","modified":"2026-08-04T18:31:25Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:10:05.423688Z"}],"nvd":[{"id":"CVE-2026-14848","description":"The Paid Membership Subscriptions  WordPress plugin before 3.0.8 does not verify that the subscription being modified through its change-subscription checkout belongs to the current user, allowing any authenticated user with Subscriber-level access and above to take over another member's subscription and overwrite its plan, status and expiration.","status":"published","published":"2026-08-04T07:16:28.823Z","modified":"2026-08-26T16:31:16.753Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:12:34.643497Z"}]}}