PT-2022-7050 · WordPress · Paid Memberships Pro

Name of the Vulnerable Software and Affected Versions: Paid Memberships Pro WordPress Plugin versions prior to 2.9.8 Description: The issue is related to an unauthenticated SQL injection vulnerability. This vulnerability is located in the code parameter of the "/pmpro/v1/order" REST route. It may...