MC
Product
Membership & Content Restriction - Paid Member Subscriptions
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 4Low 0
Watch
Add Membership & Content Restriction - Paid Member Subscriptions to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-12919 | 9.8 | Jan 14 | Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id Affected: before 2.13.8 |
| CVE-2021-24728 | 8.8 | Sep 13 | The Membership & Content Restriction – Paid Member Subscriptions WordPress plugin before 2.4.2 did not sanitise, validate or escape its order and orderby parameters before using… Affected: before 2.4.2 |
| CVE-2024-10261 | 7.3 | Nov 9 | Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.0 - Unauthenticated Arbitrary Shortcode Execution Affected: before 2.13.1 |
| CVE-2024-9222 | 6.1 | Oct 2 | Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.12.8 - Reflected Cross-Site Scripting Affected: before 2.12.9 |
| CVE-2024-11291 | 5.3 | Dec 18 | Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure Affected: before 2.13.5 |
| CVE-2024-1389 | 5.3 | Feb 20 | Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return Affected: before 2.11.2 |
| CVE-2024-1390 | 4.3 | Feb 20 | Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via creating_pricing_table_page Affected: before 2.11.2 |
Showing 7