Known vulnerabilities in the Paid Member Subscriptions plugin
17 security advisories have been published for the Paid Member Subscriptions plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Paid Member Subscriptions - Security Vulnerability (CVE-2026-97249) MEDIUM
- Paid Member Subscriptions - Security Vulnerability (CVE-2026-59539) HIGH
- Paid Member Subscriptions - Server-Side Request Forgery (SSRF) (CVE-2026-57348) HIGH
- Paid Member Subscriptions - Cross-Site Scripting (XSS) (CVE-2026-39514) HIGH
- Paid Member Subscriptions - Broken Access Control (CVE-2025-68514) MEDIUM
- Paid Member Subscriptions - Security Vulnerability (CVE-2025-11835) MEDIUM
- Paid Member Subscriptions - Broken Access Control (CVE-2025-58600) MEDIUM
- Paid Member Subscriptions - Path Traversal (CVE-2025-54017) HIGH
- Paid Member Subscriptions - SQL Injection (CVE-2025-49870) HIGH
- Paid Member Subscriptions - Cross-Site Scripting (XSS) (CVE-2025-31088) MEDIUM
- Paid Member Subscriptions - Authentication Bypass (CVE-2024-12919) CRITICAL
- Paid Member Subscriptions - Information Disclosure (CVE-2024-11291) MEDIUM
- Paid Member Subscriptions - Security Vulnerability (CVE-2024-10261) HIGH
- Paid Member Subscriptions - Cross-Site Scripting (XSS) (CVE-2024-9222) MEDIUM
- Paid Member Subscriptions - Broken Access Control (CVE-2024-1389) MEDIUM
- Paid Member Subscriptions - Broken Access Control (CVE-2024-1390) MEDIUM
- Paid Member Subscriptions - Security Vulnerability (CVE-2021-24728) HIGH