CVE-2025-3605

The Frontend Login and Registration Blocks plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.1. This is due to the plugin not properly validating a user's identity prior to updating their details like email via the...

CVE-2024-12919

CVE-2024-12919 relates to the Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress. The flaw is an Authentication Bypass in which the function pms_pb_payment_redirect_link uses a user-controlled pms_payment_id to authenticate, enabl...