Skip to contentStrangerstudios Paid Memberships Pro vulnerabilities
- paid memberships pro memberships pro, paidmembershipspro paid memberships pro +1 moreWordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2024-372777.5 High
- paidmembershipspro paid memberships pro, unknown pmpro-member-directory +1 morePaid Memberships Pro - Member Directory Add On < 1.2.6 - Contributor+ Sensitive Information Disclosure via SQLiCVE-2024-12876.5 Medium
- paidmembershipspro maps, strangerstudios paid memberships pro, unknown pmpro-membership-maps +2 morePaid Memberships Pro - Membership Maps Add On < 0.7 - Contributor+ Sensitive Information DisclosureCVE-2024-12864.9 Medium
- paid memberships pro memberships pro, strangerstudios paid memberships pro +1 moreWordPress Paid Memberships Pro plugin <= 3.0.5 - Authenticated SQL Injection vulnerabilityCVE-2024-374867.6 High
- paid memberships pro memberships pro, strangerstudios paid memberships pro +1 moreWordPress Paid Memberships Pro plugin <= 1.2.3 - Broken Access Control vulnerabilityCVE-2023-399905.4 Medium
- strangerstudios paid memberships pro – content restriction, user registration, & paid subscriptions, paid memberships pro +1 morePaid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery to Membership ModificationCVE-2024-14075.4 Medium
- strangerstudios paid memberships pro – content restriction, user registration, & paid subscriptions, paid memberships pro +1 morePaid Memberships Pro <= 3.0.1 - Cross-Site Request ForgeryCVE-2024-32155.3 Medium
- paid memberships pro memberships pro, strangerstudios paid memberships pro +1 moreWordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-327935.4 Medium
- paid memberships pro memberships pro, strangerstudios paid memberships pro +1 moreWordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-327944.3 Medium
- strangerstudios paid memberships pro – content restriction, user registration, & paid subscriptions, paid memberships pro +1 morePaid Memberships Pro <= 2.12.10 - Cross-Site Request ForgeryCVE-2024-0588Public exploit4.3 Medium
- strangerstudios paid memberships proPaid Memberships Pro < 2.12.9 - Contributor+ Arbitrary User Custom Field DisclosureCVE-2024-12794.3 Medium
- strangerstudios paid memberships pro – content restriction, user registration, & paid subscriptions, paid memberships pro +1 morePaid Memberships Pro <= 2.12.7 - Cross-Site Request Forgery to Level Orders UpdateCVE-2024-0624Public exploit5.3 Medium
- strangerstudios paid memberships pro – content restriction, user registration, & paid subscriptions, paid memberships pro +1 morePaid Memberships Pro <= 2.12.5 - Missing Authorization via APICVE-2023-68555.3 Medium
- strangerstudios paid memberships pro, paid memberships pro – content restriction, user registration, & paid subscriptions +1 morePaid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2023-6187EPSS 51.3%7.5 High
- strangerstudios paid memberships pro, paid memberships pro – content restriction, user registration, & paid subscriptions +1 morePaid Memberships Pro <= 2.4.2 - Cross-Site Request Forgery BypassCVE-2020-367544.3 Medium
- strangerstudios paid memberships proPaid Memberships Pro < 2.9.12 - Subscriber+ SQL InjectionCVE-2023-0631EPSS 60.5%8.8 High
- strangerstudios paid memberships proPaid Memberships Pro < 2.9.9 - Contributor+ Stored XSS via ShortcodeCVE-2022-4830EPSS 65.0%5.4 Medium
- strangerstudios paid memberships proThe Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL...CVE-2023-23488Public exploitEPSS 92.5%9.8 Critical
- strangerstudios paid memberships proPaid Memberships Pro < 2.6.7 - Unauthenticated Blind SQL InjectionCVE-2021-25114EPSS 81.8%9.8 Critical
- strangerstudios paid memberships proPaid Memberships Pro < 2.6.6 - Reflected Cross-Site ScriptingCVE-2021-249796.1 Medium
- stranger studios paid memberships proSQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote...CVE-2021-206788.8 High
- stranger studios paid memberships, strangerstudios paid memberships pro +1 moreSQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with...CVE-2020-55797.2 High
- strangerstudios paid memberships proMultiple cross-site scripting (XSS) vulnerabilities in the Paid Memberships Pro (PMPro) plugin...CVE-2015-55326.1 Medium
- strangerstudios paid memberships proDirectory traversal vulnerability in services/getfile.php in the Paid Memberships Pro plugin...CVE-2014-8801Public exploitEPSS 18.0%5.0 Medium