Paid Member Subscriptions
- Software type
- Other
- Total vulnerabilities (90 days)
- 5
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, Paid Member Subscriptions recorded 5 security vulnerabilities in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Paid Member Subscriptions and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-119523WordPress Paid Member Subscriptions plugin <= 3.1.3 - Broken Access Control vulnerabilityCVE-2026-119521WordPress Paid Member Subscriptions plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-112842WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerabilityCVE-2026-105317WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerabilityCVE-2026-97249WordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-119523WordPress Paid Member Subscriptions plugin <= 3.1.3 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes |
| SeverityMedium |
CVE-2026-119521WordPress Paid Member Subscriptions plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot confirmed | FixYes | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-112842WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published10/22/2026 | SeverityMedium |
|---|
CVE-2026-105317WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability | Exploitation statusNot exploited | FixYes | Published10/06/2026 | SeverityHigh |
|---|
CVE-2026-97249WordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerability | Exploitation statusNot exploited | FixYes | Published09/30/2026 | SeverityMedium |
|---|
CVE-2026-59539WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability | Exploitation statusNot exploited | FixYes | Published07/27/2026 | SeverityHigh |
|---|
CVE-2026-57348WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability | Exploitation statusNot exploited | FixYes | Published07/02/2026 | SeverityHigh |
|---|
CVE-2026-39514WordPress Paid Member Subscriptions plugin <= 2.17.3 - Reflected Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published06/15/2026 | SeverityHigh |
|---|
CVE-2025-68514WordPress Paid Member Subscriptions plugin <= 2.16.8 - Insecure Direct Object References (IDOR) vulnerability | Exploitation statusNot exploited | FixYes | Published02/20/2026 | SeverityMedium |
|---|
CVE-2025-58600WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability | Exploitation statusNot exploited | FixYes | Published09/03/2025 | SeverityMedium |
|---|
CVE-2025-54017WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability | Exploitation statusNot exploited | FixYes | Published08/20/2025 | SeverityHigh |
|---|
CVE-2025-49870WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability | Exploitation statusNot exploited | FixYes | Published07/04/2025 | SeverityHigh |
|---|
CVE-2025-31088WordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) Vulnerability | Exploitation statusNot exploited | FixYes | Published03/28/2025 | SeverityMedium |
|---|
CVE-2024-32728WordPress Paid Membership Subscriptions plugin <= 2.11.0 - Cross Site Request Forgery (CSRF) vulnerability | Exploitation statusNot exploited | FixYes | Published04/24/2024 | SeverityMedium |
|---|
CVE-2023-51522WordPress Paid Membership Subscriptions plugin <= 2.10.4 - Cross Site Request Forgery (CSRF) vulnerability | Exploitation statusNot exploited | FixYes | Published03/15/2024 | SeverityMedium |
|---|
15 Results | Page 1 of 1