Known vulnerabilities in the Paid Membership Subscriptions plugin
13 security advisories have been published for the Paid Membership Subscriptions plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Paid Membership Subscriptions - Security Vulnerability (CVE-2026-90950) MEDIUM
- Paid Membership Subscriptions - Security Vulnerability (CVE-2026-90951) LOW
- Paid Membership Subscriptions - Security Vulnerability (CVE-2026-90922) MEDIUM
- Paid Membership Subscriptions - Security Vulnerability (CVE-2026-14848) MEDIUM
- Paid Membership Subscriptions - Cross-Site Request Forgery (CSRF) (CVE-2026-14847) MEDIUM
- Paid Membership Subscriptions - Security Vulnerability (CVE-2026-14849) LOW
- Paid Membership Subscriptions - Security Vulnerability (CVE-2025-11835) MEDIUM
- Paid Membership Subscriptions - Authentication Bypass (CVE-2024-12919) CRITICAL
- Paid Membership Subscriptions - Information Disclosure (CVE-2024-11291) MEDIUM
- The Paid Membership Subscriptions - Security Vulnerability (CVE-2024-10261) HIGH
- Paid Membership Subscriptions - Cross-Site Scripting (XSS) (CVE-2024-9222) MEDIUM
- Paid Membership Subscriptions - Cross-Site Request Forgery (CSRF) (CVE-2023-51522) MEDIUM
- Paid Membership Subscriptions - Broken Access Control (CVE-2024-1389) MEDIUM
- Paid Membership Subscriptions - Broken Access Control (CVE-2024-1390) MEDIUM