Membership \& content restriction - paid member subscriptions
This hub aggregates every CVE we track for Membership \& content restriction - paid member subscriptions, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.
7
CVEs tracked
1
Critical
2
High
0
In CISA KEV
Severity distribution
MEDIUM4HIGH2CRITICAL1
Monthly trend
1
1
1
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
2024-102026-09
Latest CVEs
The 7 most recently published vulnerabilities affecting Membership \& content restriction - paid member subscriptions.
- CVE-2024-12919Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id9.8
- CVE-2024-11291Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure5.3
- CVE-2024-10261Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.0 - Unauthenticated Arbitrary Shortcode Execution7.3
- CVE-2024-9222Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.12.8 - Reflected Cross-Site Scripting6.1
- CVE-2024-1389Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return5.3
- CVE-2024-1390Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via creating_pricing_table_page4.3
- CVE-2021-24728Paid Member Subscriptions < 2.4.2 - Authenticated SQL Injection8.8
Product normalization is registry-driven with AI assist and human review. How it works