CVE-2026-88764

Simple Membership is a WordPress plugin that manages paid membership levels via PayPal. Versions before 4.7.8 fail to validate that the membership level specified in a PayPal Standard payment notification (via the subsc_ref parameter) matches the level configured for the paid payment button. An a...