Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Paid Memberships Pro — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Paid Memberships Pro, with AI-generated Chinese analysis, references, and POCs.

Vendor: Stranger Studios

CVE IDTitleCVSSSeverityPublished
CVE-2024-37277 WordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerability CWE-639 7.5 High2024-11-01
CVE-2024-37486 WordPress Paid Memberships Pro plugin <= 3.0.5 - Authenticated SQL Injection vulnerability CWE-89 7.6 High2024-07-09
CVE-2023-39990 WordPress Paid Memberships Pro plugin <= 1.2.3 - Broken Access Control vulnerability CWE-862 5.4 Medium2024-06-19
CVE-2024-32793 WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 5.4 Medium2024-04-24
CVE-2024-32794 WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium2024-04-24
CVE-2024-1279 Paid Memberships Pro < 2.12.9 - Contributor+ Arbitrary User Custom Field Disclosure 4.3AIMediumAI2024-03-11
CVE-2023-0631 Paid Memberships Pro < 2.9.12 - Subscriber+ SQL Injection 8.8 -2023-03-20
CVE-2022-4830 Paid Memberships Pro < 2.9.9 - Contributor+ Stored XSS via Shortcode 5.4 -2023-02-13
CVE-2021-25114 Paid Memberships Pro < 2.6.7 - Unauthenticated Blind SQL Injection CWE-89 9.8 -2022-02-07
CVE-2021-24979 Paid Memberships Pro < 2.6.6 - Reflected Cross-Site Scripting CWE-79 6.1 -2021-12-27
CVE-2021-20678 WordPress plugin Paid Memberships Pro SQL注入漏洞 8.8 -2021-03-18

All 11 known CVE vulnerabilities affecting Paid Memberships Pro with full Chinese analysis, references, and POCs where available.