CVE-2026-90951

The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not bind one of its unauthenticated payment actions to the requesting user, allowing someone who holds another member's in-flight payment identifier to delete that member's checkout state...

CVE-2026-90951 Paid Member Subscriptions < 3.1.0 - Unauthenticated In-Flight Checkout State Deletion via pms_process_payment

The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not bind one of its unauthenticated payment actions to the requesting user, allowing someone who holds another member's in-flight payment identifier to delete that member's checkout state...

CVE-2026-90951 Paid Member Subscriptions < 3.1.0 - Unauthenticated In-Flight Checkout State Deletion via pms_process_payment

The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not bind one of its unauthenticated payment actions to the requesting user, allowing someone who holds another member's in-flight payment identifier to delete that member's checkout state...

EUVD-2026-85054

The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not bind one of its unauthenticated payment actions to the requesting user, allowing someone who holds another member's in-flight payment identifier to delete that member's checkout state...

WordPress Paid Membership Subscriptions plugin < 3.1.0 - Unauthenticated In-Flight Checkout State Deletion vulnerability

Unauthenticated In-Flight Checkout State Deletion vulnerability discovered by vuxvinh in WordPress Plugin Paid Member Subscriptions versions 3.1.0...

CVE-2026-90951

The Paid Membership Subscriptions WordPress plugin (versions before 3.1.0 ) contains an incorrect authorization vulnerability. The root cause is that the plugin fails to bind an unauthenticated payment action to the requesting user. Specifically, an attacker who obtains another member's in-flight...

CVE-2026-90951: Incorrect Authorization

The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not bind one of its unauthenticated payment actions to the requesting user, allowing someone who holds another member's in-flight payment identifier to delete that member's checkout state...

PT-2026-97191

Name of the Vulnerable Software and Affected Versions Paid Membership Subscriptions versions prior to 3.1.0 Description An issue exists where an unauthenticated payment action is not bound to the requesting user. This allows an attacker who possesses another member's in-flight payment identifier ...