Skip to contentUnknown Paid Memberships Pro vulnerabilities
- paid memberships pro memberships pro, paidmembershipspro paid memberships pro +1 moreWordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2024-372777.5 High
- paid memberships pro memberships pro, strangerstudios paid memberships pro +1 moreWordPress Paid Memberships Pro plugin <= 3.0.5 - Authenticated SQL Injection vulnerabilityCVE-2024-374867.6 High
- paid memberships pro memberships pro, strangerstudios paid memberships pro +1 moreWordPress Paid Memberships Pro plugin <= 1.2.3 - Broken Access Control vulnerabilityCVE-2023-399905.4 Medium
- paid memberships pro memberships pro, strangerstudios paid memberships pro +1 moreWordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-327935.4 Medium
- paid memberships pro memberships pro, strangerstudios paid memberships pro +1 moreWordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-327944.3 Medium
- strangerstudios paid memberships proPaid Memberships Pro < 2.12.9 - Contributor+ Arbitrary User Custom Field DisclosureCVE-2024-12794.3 Medium
- strangerstudios paid memberships proPaid Memberships Pro < 2.9.12 - Subscriber+ SQL InjectionCVE-2023-0631EPSS 60.5%8.8 High
- strangerstudios paid memberships proPaid Memberships Pro < 2.9.9 - Contributor+ Stored XSS via ShortcodeCVE-2022-4830EPSS 65.0%5.4 Medium
- paidmembershipspro custom user profile fields for user registration, unknown custom user profile fields for user registration & member frontend profiles with paid memberships pro +1 moreCustom User Profile Fields for User Registration & Member Frontend Profiles with Paid Memberships Pro < 1.8.1 - Contributor+ Stored XSS via ShortcodeCVE-2022-48315.4 Medium
- strangerstudios paid memberships proPaid Memberships Pro < 2.6.7 - Unauthenticated Blind SQL InjectionCVE-2021-25114EPSS 81.8%9.8 Critical
- strangerstudios paid memberships proPaid Memberships Pro < 2.6.6 - Reflected Cross-Site ScriptingCVE-2021-249796.1 Medium
- stranger studios paid memberships proSQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote...CVE-2021-206788.8 High