PM
Product
Paid Member Subscriptions
12
CVEs
0
On KEV
8.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 7Medium 5Low 0
Watch
Add Paid Member Subscriptions to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-105317 | 8.5 | Oct 6 | WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability Affected: through 3.1.1 |
| CVE-2026-59539 | 7.5 | Jul 27 | WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability Affected: through 3.0.7 |
| CVE-2025-54017 | 7.5 | Aug 20 | WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability Affected: through 2.15.4 |
| CVE-2025-49870 | 7.5 | Jul 4 | WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability Affected: through 2.15.1 |
| CVE-2024-10261 | 7.3 | Nov 9 | Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.0 - Unauthenticated Arbitrary Shortcode Execution Affected: through 2.13.0 |
| CVE-2026-57348 | 7.2 | Jul 2 | WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability Affected: through 3.0.4 |
| CVE-2026-39514 | 7.1 | Jun 15 | WordPress Paid Member Subscriptions plugin <= 2.17.3 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 2.17.3 |
| CVE-2026-112842 | 6.5 | Oct 22 | WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerability Affected: through 3.1.2 |
| CVE-2025-68514 | 6.5 | Feb 20 | WordPress Paid Member Subscriptions plugin <= 2.16.8 - Insecure Direct Object References (IDOR) vulnerability Affected: through 2.16.8 |
| CVE-2025-31088 | 6.5 | Mar 28 | WordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) Vulnerability Affected: through 2.14.3 |
| CVE-2026-97249 | 5.3 | Sep 30 | WordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerability Affected: through 3.0.9 |
| CVE-2025-58600 | 5.3 | Sep 3 | WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability Affected: through 2.15.9 |
Showing 12