Skip to content
Noroxi

Paid Member Subscriptions

paid-member-subscriptions · plugin

Known security vulnerabilities for Paid Member Subscriptions. Find out in seconds which version runs on your site with WP Lens.

19 known vulnerabilities

1 critical · latest Sep 30, 2026

Vulnerabilities

  • CVE-2024-12919

    Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id

    Critical 9.8

  • CVE-2023-51522

    WordPress Paid Membership Subscriptions plugin <= 2.10.4 - Cross Site Request Forgery (CSRF) vulnerability

    High 8.8

  • CVE-2021-24728→ 2.4.2

    Paid Member Subscriptions < 2.4.2 - Authenticated SQL Injection

    High 8.8

  • CVE-2026-59539

    WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability

    High 7.5

  • CVE-2025-54017

    WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability

    High 7.5

  • CVE-2025-49870

    WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability

    High 7.5

  • CVE-2024-10261

    Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.0 - Unauthenticated Arbitrary Shortcode Execution

    High 7.3

  • CVE-2026-57348

    WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability

    High 7.2

  • CVE-2026-39514

    WordPress Paid Member Subscriptions plugin <= 2.17.3 - Reflected Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2025-68514

    WordPress Paid Member Subscriptions plugin <= 2.16.8 - Insecure Direct Object References (IDOR) vulnerability

    Medium 6.5

  • CVE-2025-31088

    WordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) Vulnerability

    Medium 6.5

  • CVE-2024-9222

    Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.12.8 - Reflected Cross-Site Scripting

    Medium 6.1

  • CVE-2026-97249

    WordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerability

    Medium 5.3

  • CVE-2025-11835

    Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.16.4 - Missing Authorization to Unauthenticated Arbitrary

    Medium 5.3

  • CVE-2025-58600

    WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability

    Medium 5.3

  • CVE-2024-11291

    Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensi

    Medium 5.3

  • CVE-2024-1389

    Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle

    Medium 5.3

  • CVE-2024-32728

    WordPress Paid Membership Subscriptions plugin <= 2.11.0 - Cross Site Request Forgery (CSRF) vulnerability

    Medium 4.3

  • CVE-2024-1390

    Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via creating_pricing_table_pa

    Medium 4.3

← Back to directory