Paid Membership Subscriptions (Unknown) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-23. Vendor: Unknown.

CVEs of Paid Membership Subscriptions

• CVE-2026-90950 - CVSS 5.3 (medium), 2026-09-23: The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not verify the reCAPTCHA on its registration handler when a form field is absent from the…
• CVE-2026-90951 - CVSS 3.7 (low), 2026-09-23: The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not bind one of its unauthenticated payment actions to the requesting user, allowing…
• CVE-2026-90922 - CVSS 5.3 (medium), 2026-09-17: The Paid Membership Subscriptions WordPress plugin before 3.0.9 does not verify that the amount and currency reported by the payment provider match the…
• CVE-2026-14848 - CVSS 5.4 (medium), 2026-08-04: The Paid Membership Subscriptions WordPress plugin before 3.0.8 does not verify that the subscription being modified through its change-subscription checkout…
• CVE-2026-14847 - CVSS 4.3 (medium), 2026-07-31: The Paid Membership Subscriptions WordPress plugin before 3.0.7 does not perform capability or nonce checks on one of its payment-related AJAX actions,…
• CVE-2026-14849 - CVSS 3.7 (low), 2026-07-31: The Paid Membership Subscriptions WordPress plugin before 3.0.7 does not protect the member and payment export files it writes to a predictable location in…