WPScan
How it worksPricing
Vulnerabilities
WordPressPluginsThemesStatsSubmit vulnerabilities
For developers
StatusAPI detailsCLI scanner
Contact

WordPress Plugin Vulnerabilities

Paid Memberships Pro – Restrict Member Access to Content, Courses, Communities – Free or Paid Subscriptions

2022-01-07
Paid Memberships Pro < 2.6.7 - Unauthenticated Blind SQL Injection
Fixed in version 2.6.7
2021-11-23
Paid Memberships Pro < 2.6.6 - Reflected Cross-Site Scripting
Fixed in version 2.6.6
2021-06-25
Paid Membership Pro < 2.5.10 - Cross-Site Scripting (XSS)
Fixed in version 2.5.10
2021-03-17
Paid Membership Pro < 2.5.6 - Authenticated SQL Injection
Fixed in version 2.5.6
2021-02-06
Paid Membership Pro < 2.5.3 - Unauthorised Order Information Disclosure
Fixed in version 2.5.3
2020-11-16
Paid Memberships Pro < 2.5.1 - Authenticated Cross-Site Scripting (XSS)
Fixed in version 2.5.1
2020-09-16
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Fixed in version 2.4.3
2020-05-19
Paid Memberships Pro < 2.3.3 - Authenticated SQL Injection
Fixed in version 2.3.3
2019-06-01
Paid Memberships Pro <= 2.0.5 - Authenticated Open Redirect
Fixed in version 2.0.6
2015-07-22
Paid Memberships Pro 1.8.4.2 - Cross-Site Scripting (XSS)
Fixed in version 1.8.4.3
2014-11-19
Paid Memberships Pro 1.7.14.2 - Path Traversal
Fixed in version 1.7.15
2014-08-01
Paid Memberships Pro 1.4.7 - adminpages/memberslist-csv.php Direct Request Member Personal Information Disclosure
Fixed in version 1.5