WordPress Plugins Themes API Submit Contact

WordPress Plugins Themes API Submit Contact Security Scanner

Login

Register

Paid Memberships Pro

2021-11-23

Paid Memberships Pro < 2.6.6 - Reflected Cross-Site Scripting

fixed in version 2.6.6✓

2021-06-25

Paid Membership Pro < 2.5.10 - Cross-Site Scripting (XSS)

fixed in version 2.5.10✓

2021-03-17

Paid Membership Pro < 2.5.6 - Authenticated SQL Injection

fixed in version 2.5.6✓

2021-02-06

Paid Membership Pro < 2.5.3 - Unauthorised Order Information Disclosure

fixed in version 2.5.3✓

2020-11-16

Paid Memberships Pro < 2.5.1 - Authenticated Cross-Site Scripting (XSS)

fixed in version 2.5.1✓

2020-09-16

Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)

fixed in version 2.4.3✓

2020-05-19

Paid Memberships Pro < 2.3.3 - Authenticated SQL Injection

fixed in version 2.3.3✓

2019-06-01

Paid Memberships Pro <= 2.0.5 - Authenticated Open Redirect

fixed in version 2.0.6✓

2015-07-22

Paid Memberships Pro 1.8.4.2 - Cross-Site Scripting (XSS)

fixed in version 1.8.4.3✓

2014-11-19

Paid Memberships Pro 1.7.14.2 - Path Traversal

fixed in version 1.7.15✓

2014-08-01

Paid Memberships Pro 1.4.7 - adminpages/memberslist-csv.php Direct Request Member Personal Information Disclosure

fixed in version 1.5✓

Is this your WordPress plugin?

We offer WordPress plugin security testing to help identify security vulnerabilities within your plugin. Please note that this is a paid service. If you are interested in talking about having your plugin tested by WordPress security experts, get in touch.