Paid member subscriptions
This hub aggregates every CVE we track for Paid member subscriptions, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.
10
CVEs tracked
0
Critical
5
High
0
In CISA KEV
Severity distribution
HIGH5MEDIUM5
Monthly trend
0
0
0
0
0
0
1
0
0
0
1
1
1
0
0
0
0
1
0
0
0
1
2
0
2024-092026-08
Latest CVEs
The 10 most recently published vulnerabilities affecting Paid member subscriptions.
- CVE-2026-59539WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability7.5
- CVE-2026-57348WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability7.2
- CVE-2026-39514WordPress Paid Member Subscriptions plugin <= 2.17.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1
- CVE-2025-68514WordPress Paid Member Subscriptions plugin <= 2.16.8 - Insecure Direct Object References (IDOR) vulnerability6.5
- CVE-2025-58600WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability5.3
- CVE-2025-54017WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability7.5
- CVE-2025-49870WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability7.5
- CVE-2025-31088WordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) Vulnerability6.5
- CVE-2024-32728WordPress Paid Membership Subscriptions plugin <= 2.11.0 - Cross Site Request Forgery (CSRF) vulnerability4.3
- CVE-2023-51522WordPress Paid Membership Subscriptions plugin <= 2.10.4 - Cross Site Request Forgery (CSRF) vulnerability4.3
Product normalization is registry-driven with AI assist and human review. How it works