PM
Product
Paid Member Subscriptions
by Cozmoslabs · last CVE Oct 22, 2026
12
CVEs
0
On KEV
8.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 7Medium 5Low 0
Watch

Add Paid Member Subscriptions to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-112842
6.5
0%
Oct 22
WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerability
Affected: through 3.1.2
CVE-2025-68514
6.5
0%
Feb 20
WordPress Paid Member Subscriptions plugin <= 2.16.8 - Insecure Direct Object References (IDOR) vulnerability
Affected: through 2.16.8
CVE-2025-31088
6.5
0%
Mar 28
WordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) Vulnerability
Affected: through 2.14.3
CVE-2026-97249
5.3
0%
Sep 30
WordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerability
Affected: through 3.0.9
CVE-2025-58600
5.3
0%
Sep 3
WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability
Affected: through 2.15.9
Showing 5