CVE-2026-57348

Unauthenticated Server Side Request Forgery (SSRF) in Paid Member Subscriptions <= 3.0.4 versions.

Score

CVSS 3.1 7.2 High

Status

Deferred - audit@patchstack.com

Published

2026-07-02

Last modified

2026-10-25

Weaknesses

CWE-918

Affected products

• Paid Member Subscriptions (Cozmoslabs)

References

• https://patchstack.com/database/wordpress/plugin/paid-member-subscriptions/vulnerability/wordpress-paid-member-subscrip…