Skip to content

Strangerstudios vulnerabilities

Products

Newest

strangerstudios paid memberships pro – content restriction, user registration, & paid subscriptions Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions <= 3.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2026-15016 6.4 MediumJuly 28, 2026
strangerstudios paid memberships pro – content restriction, user registration, & paid subscriptions Paid Memberships Pro <= 3.6.5 - Missing Authorization to Authenticated (Subscriber+) Stripe Webhook Deletion and Payment Processing Disruption CVE-2026-4100 7.1 HighMay 2, 2026
jason c. memberlite shortcodes Memberlite Shortcodes <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-10125 6.4 MediumSeptember 17, 2025
jason c. memberlite shortcodes Memberlite Shortcodes <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via memberlite_accordion Shortcode CVE-2024-11227 6.4 MediumNovember 23, 2024
paid memberships pro memberships pro, paidmembershipspro paid memberships pro +1 more WordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerability CVE-2024-37277 7.5 HighNovember 1, 2024
paidmembershipspro paid memberships pro, unknown pmpro-member-directory +1 more Paid Memberships Pro - Member Directory Add On < 1.2.6 - Contributor+ Sensitive Information Disclosure via SQLi CVE-2024-1287 6.5 MediumJuly 30, 2024
paidmembershipspro maps, strangerstudios paid memberships pro, unknown pmpro-membership-maps +2 more Paid Memberships Pro - Membership Maps Add On < 0.7 - Contributor+ Sensitive Information Disclosure CVE-2024-1286 4.9 MediumJuly 30, 2024
paid memberships pro memberships pro, strangerstudios paid memberships pro +1 more WordPress Paid Memberships Pro plugin <= 3.0.5 - Authenticated SQL Injection vulnerability CVE-2024-37486 7.6 HighJuly 9, 2024
paid memberships pro memberships pro, strangerstudios paid memberships pro +1 more WordPress Paid Memberships Pro plugin <= 1.2.3 - Broken Access Control vulnerability CVE-2023-39990 5.4 MediumJune 19, 2024
strangerstudios paid memberships pro – content restriction, user registration, & paid subscriptions, paid memberships pro +1 more Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery to Membership Modification CVE-2024-1407 5.4 MediumJune 19, 2024
strangerstudios paid memberships pro – content restriction, user registration, & paid subscriptions, paid memberships pro +1 more Paid Memberships Pro <= 3.0.1 - Cross-Site Request Forgery CVE-2024-3215 5.3 MediumMay 2, 2024
paid memberships pro memberships pro, strangerstudios paid memberships pro +1 more WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-32793 5.4 MediumApril 24, 2024
paid memberships pro memberships pro, strangerstudios paid memberships pro +1 more WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-32794 4.3 MediumApril 24, 2024
strangerstudios paid memberships pro – content restriction, user registration, & paid subscriptions, paid memberships pro +1 more Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery CVE-2024-0588 Public exploit 4.3 MediumApril 9, 2024
strangerstudios paid memberships pro Paid Memberships Pro < 2.12.9 - Contributor+ Arbitrary User Custom Field Disclosure CVE-2024-1279 4.3 MediumMarch 11, 2024
strangerstudios paid memberships pro – content restriction, user registration, & paid subscriptions, paid memberships pro +1 more Paid Memberships Pro <= 2.12.7 - Cross-Site Request Forgery to Level Orders Update CVE-2024-0624 Public exploit 5.3 MediumJanuary 25, 2024
strangerstudios paid memberships pro – content restriction, user registration, & paid subscriptions, paid memberships pro +1 more Paid Memberships Pro <= 2.12.5 - Missing Authorization via API CVE-2023-6855 5.3 MediumJanuary 11, 2024
strangerstudios paid memberships pro, paid memberships pro – content restriction, user registration, & paid subscriptions +1 more Paid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2023-6187 EPSS 51.3% 7.5 HighNovember 18, 2023
stranger studios force first and last name as display name, strangerstudios force display name +1 more WordPress Force First and Last Name as Display Name Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-28419 5.4 MediumNovember 12, 2023
jason c. memberlite shortcodes Memberlite Shortcodes < 1.3.9 - Contributor+ Stored XSS via Shortcode CVE-2023-5237 5.4 MediumOctober 31, 2023
strangerstudios paid memberships pro, paid memberships pro – content restriction, user registration, & paid subscriptions +1 more Paid Memberships Pro <= 2.4.2 - Cross-Site Request Forgery Bypass CVE-2020-36754 4.3 MediumOctober 20, 2023
strangerstudios paid memberships pro Paid Memberships Pro < 2.9.12 - Subscriber+ SQL Injection CVE-2023-0631 EPSS 60.5% 8.8 HighMarch 20, 2023
strangerstudios paid memberships pro Paid Memberships Pro < 2.9.9 - Contributor+ Stored XSS via Shortcode CVE-2022-4830 EPSS 65.0% 5.4 MediumFebruary 13, 2023
strangerstudios paid memberships pro The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL... CVE-2023-23488 Public exploit EPSS 92.5% 9.8 CriticalJanuary 20, 2023
strangerstudios paid memberships pro Paid Memberships Pro < 2.6.7 - Unauthenticated Blind SQL Injection CVE-2021-25114 EPSS 81.8% 9.8 CriticalFebruary 7, 2022
strangerstudios paid memberships pro Paid Memberships Pro < 2.6.6 - Reflected Cross-Site Scripting CVE-2021-24979 6.1 MediumDecember 27, 2021
stranger studios paid memberships pro SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote... CVE-2021-20678 8.8 HighMarch 18, 2021
stranger studios paid memberships, strangerstudios paid memberships pro +1 more SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with... CVE-2020-5579 7.2 HighMay 20, 2020
strangerstudios paid memberships pro Multiple cross-site scripting (XSS) vulnerabilities in the Paid Memberships Pro (PMPro) plugin... CVE-2015-5532 6.1 MediumOctober 23, 2017
strangerstudios paid memberships pro Directory traversal vulnerability in services/getfile.php in the Paid Memberships Pro plugin... CVE-2014-8801 Public exploit EPSS 18.0% 5.0 MediumNovember 28, 2014