WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
paid-membership
Published
2025-03-12
Title
MicroPayments < 3.2.5 - Reflected Cross-Site Scripting
Slug
paid-membership
Published
2025-03-28
Title
MicroPayments < 2.9.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
paid-membership
Published
2025-06-27
Title
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet < 3.2.1 - Cross-Site Request Forgery to Settings Reset
Slug
paid-memberships-pro
Published
2014-08-01
Title
Paid Memberships Pro 1.4.7 - adminpages/memberslist-csv.php Direct Request Member Personal Information Disclosure
Slug
paid-memberships-pro
Published
2014-11-19
Title
Paid Memberships Pro 1.7.14.2 - Path Traversal
Slug
paid-memberships-pro
Published
2015-07-22
Title
Paid Memberships Pro 1.8.4.2 - Cross-Site Scripting (XSS)
Slug
paid-memberships-pro
Published
2019-06-01
Title
Paid Memberships Pro <= 2.0.5 - Authenticated Open Redirect
Slug
paid-memberships-pro
Published
2020-05-19
Title
Paid Memberships Pro < 2.3.3 - Authenticated SQL Injection
Slug
paid-memberships-pro
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
paid-memberships-pro
Published
2020-11-16
Title
Paid Memberships Pro < 2.5.1 - Authenticated Cross-Site Scripting (XSS)
Slug
paid-memberships-pro
Published
2021-02-06
Title
Paid Membership Pro < 2.5.3 - Unauthorised Order Information Disclosure
Slug
paid-memberships-pro
Published
2021-03-17
Title
Paid Membership Pro < 2.5.6 - Authenticated SQL Injection
Slug
paid-memberships-pro
Published
2021-06-25
Title
Paid Membership Pro < 2.5.10 - Cross-Site Scripting (XSS)
Slug
paid-memberships-pro
Published
2021-11-23
Title
Paid Memberships Pro < 2.6.6 - Reflected Cross-Site Scripting
Slug
paid-memberships-pro
Published
2022-01-07
Title
Paid Memberships Pro < 2.6.7 - Unauthenticated Blind SQL Injection
Slug
paid-memberships-pro
Published
2023-01-12
Title
Paid Membership Pro < 2.9.8 - Unauthenticated SQLi
Slug
paid-memberships-pro
Published
2023-01-27
Title
Paid Memberships Pro < 2.9.9 - Contributor+ Stored XSS via Shortcode
Slug
paid-memberships-pro
Published
2023-02-27
Title
Paid Memberships Pro < 2.9.12 - Subscriber+ SQL Injection
Slug
paid-memberships-pro
Published
2020-09-16
Title
Paid Memberships Pro < 2.4.3 - Arbitrary Settings Update via CSRF
Slug
paid-memberships-pro
Published
2023-11-16
Title
Paid Memberships Pro < 2.12.4 - Subscriber+ Arbitrary File Upload
Slug
paid-memberships-pro
Published
2023-12-21
Title
Paid Memberships Pro < 2.12.6 - Missing Authorization via API
Slug
paid-memberships-pro
Published
2024-01-24
Title
Paid Memberships Pro < 2.12.8 - Cross-Site Request Forgery
Slug
paid-memberships-pro
Published
2024-02-16
Title
Paid Memberships Pro < 2.12.9 - Contributor+ Arbitrary User Custom Field Disclosure
Slug
paid-memberships-pro
Published
2024-01-12
Title
Paid Memberships Pro < 2.12.7 - Information Exposure in Debug Logs
Slug
paid-memberships-pro
Published
2024-03-25
Title
Paid Memberships Pro < 3.0 - Cross-Site Request Forgery