Paid Memberships Pro Security Vulnerabilities and Issues — Paid Memberships Pro CVE List

Lucene search

StrangerstudiosPaid Memberships Pro

3 matches found

CVE•added 2023/01/20 6:15 p.m.•195 views

CVE-2023-23488

The Paid Memberships Pro WordPress Plugin, version

9.8CVSS9.6AI score0.78833EPSS

CVE•added 2022/02/07 4:15 p.m.•59 views

CVE-2021-25114

The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discount_code in one of its REST route (available to unauthenticated users) before using it in a SQL statement, leading to a SQL injection

9.8CVSS9.8AI score0.63757EPSS

CVE•added 2024/11/01 3:15 p.m.•41 views

CVE-2024-37277

Authorization Bypass Through User-Controlled Key vulnerability in Paid Memberships Pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Paid Memberships Pro: from n/a through 3.0.4.

9.8CVSS7.5AI score0.00417EPSS