WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
paid-downloads
Published
2026-01-21
Title
Paid Downloads <= 3.15 - Unauthenticated SQL Injection
Slug
paid-downloads
Published
2026-09-16
Title
Paid Downloads <= 3.15 - Unauthenticated Arbitrary File Upload via 'paiddownloads_update_file' Action
Slug
paid-member-subscriptions
Published
2021-07-26
Title
Paid Member Subscriptions < 2.4.2 - Reflected Cross-Site Scripting (XSS)
Slug
paid-member-subscriptions
Published
2021-08-06
Title
Paid Member Subscriptions < 2.4.2 - Authenticated SQL Injection
Slug
paid-member-subscriptions
Published
2023-12-27
Title
Paid Member Subscriptions < 2.10.5 - Cross-Site Request Forgery via ajax_add_log_entry
Slug
paid-member-subscriptions
Published
2024-02-13
Title
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction < 2.11.2 - Missing Authorization via creating_pricing_table_page
Slug
paid-member-subscriptions
Published
2024-02-13
Title
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction < 2.11.2 - Missing Authorization via pms_stripe_connect_handle_authorization_return
Slug
paid-member-subscriptions
Published
2024-04-22
Title
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction < 2.11.1 - Cross-Site Request Forgery to Notice Dismissal
Slug
paid-member-subscriptions
Published
2024-10-01
Title
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction < 2.12.9 - Reflected Cross-Site Scripting
Slug
paid-member-subscriptions
Published
2024-11-08
Title
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction < 2.13.1 - Unauthenticated Arbitrary Shortcode Execution
Slug
paid-member-subscriptions
Published
2024-12-17
Title
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction < 2.13.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
paid-member-subscriptions
Published
2025-01-13
Title
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction < 2.13.8 - Authentication Bypass via pms_payment_id
Slug
paid-member-subscriptions
Published
2025-03-28
Title
Paid Member Subscriptions < 2.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
paid-member-subscriptions
Published
2025-07-03
Title
Paid Member Subscriptions < 2.15.2 - Unauthenticated SQL Injection
Slug
paid-member-subscriptions
Published
2025-07-29
Title
Paid Membership Subscriptions < 2.15.5 - Unauthenticated Local File Inclusion
Slug
paid-member-subscriptions
Published
2025-09-03
Title
Paid Member Subscriptions < 2.16.0 - Missing Authorization
Slug
paid-member-subscriptions
Published
2025-11-04
Title
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction < 2.16.5 - Missing Authorization to Unauthenticated Arbitrary Member Subscription Auto Renewal
Slug
paid-member-subscriptions
Published
2026-02-11
Title
Paid Member Subscriptions < 2.16.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
paid-member-subscriptions
Published
2026-04-20
Title
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction < 3.0.0 - Reflected Cross-Site Scripting
Slug
paid-member-subscriptions
Published
2026-07-01
Title
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction < 3.0.5 - Unauthenticated Server-Side Request Forgery
Slug
paid-member-subscriptions
Published
2026-07-13
Title
Paid Member Subscriptions < 3.0.7 - Subscriber+ Payment Data Disclosure via IDOR
Slug
paid-member-subscriptions
Published
2026-07-13
Title
Paid Member Subscriptions < 3.0.7 - Unauthenticated Sensitive Information Exposure via Residual Export Files
Slug
paid-member-subscriptions
Published
2026-07-23
Title
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction < 3.0.8 - Insecure Direct Object Reference
Slug
paid-member-subscriptions
Published
2026-07-27
Title
Paid Member Subscriptions < 3.0.8 - Subscriber+ Cross-User Subscription Hijack via process_checkout
Slug
paid-member-subscriptions
Published
2026-09-15
Title
Paid Member Subscriptions < 3.0.9 - Unauthenticated Membership Payment Bypass via PayPal Standard Amount and Currency Mismatch