Paid Member Subscriptions

Güvenlik açıkları

• CVE-2024-12919

  Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id

  Kritik 9.8

• CVE-2023-51522

  WordPress Paid Membership Subscriptions plugin <= 2.10.4 - Cross Site Request Forgery (CSRF) vulnerability

  Yüksek 8.8

• CVE-2021-24728→ 2.4.2

  Paid Member Subscriptions < 2.4.2 - Authenticated SQL Injection

  Yüksek 8.8

• CVE-2026-59539

  WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability

  Yüksek 7.5

• CVE-2025-54017

  WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability

  Yüksek 7.5

• CVE-2025-49870

  WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability

  Yüksek 7.5

• CVE-2024-10261

  Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.0 - Unauthenticated Arbitrary Shortcode Execution

  Yüksek 7.3

• CVE-2026-57348

  WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability

  Yüksek 7.2

• CVE-2026-39514

  WordPress Paid Member Subscriptions plugin <= 2.17.3 - Reflected Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2025-68514

  WordPress Paid Member Subscriptions plugin <= 2.16.8 - Insecure Direct Object References (IDOR) vulnerability

  Orta 6.5

• CVE-2025-31088

  WordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) Vulnerability

  Orta 6.5

• CVE-2024-9222

  Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.12.8 - Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2026-97249

  WordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerability

  Orta 5.3

• CVE-2025-11835

  Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.16.4 - Missing Authorization to Unauthenticated Arbitrary

  Orta 5.3

• CVE-2025-58600

  WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability

  Orta 5.3

• CVE-2024-11291

  Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensi

  Orta 5.3

• CVE-2024-1389

  Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle

  Orta 5.3

• CVE-2024-32728

  WordPress Paid Membership Subscriptions plugin <= 2.11.0 - Cross Site Request Forgery (CSRF) vulnerability

  Orta 4.3

• CVE-2024-1390

  Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via creating_pricing_table_pa

  Orta 4.3