Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Paid Member Subscriptions — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in Paid Member Subscriptions, with AI-generated Chinese analysis, references, and POCs.

Vendor: Cozmoslabs

CVE ID Title CVSS Severity Published
CVE-2026-112842 WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerability CWE-862 6.5 Medium 2026-10-22
CVE-2026-105317 WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability CWE-89 8.5 High 2026-10-06
CVE-2026-97249 WordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerability CWE-290 5.3 Medium 2026-09-30
CVE-2026-59539 WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability CWE-639 7.5 High 2026-07-27
CVE-2026-57348 WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability CWE-918 7.2 High 2026-07-02
CVE-2026-39514 WordPress Paid Member Subscriptions plugin <= 2.17.3 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-06-15
CVE-2025-68514 WordPress Paid Member Subscriptions plugin <= 2.16.8 - Insecure Direct Object References (IDOR) vulnerability CWE-639 6.5 Medium 2026-02-20
CVE-2025-58600 WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability CWE-862 5.3 Medium 2025-09-03
CVE-2025-54017 WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability CWE-98 7.5 High 2025-08-20
CVE-2025-49870 WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability CWE-89 7.5 High 2025-07-04
CVE-2025-31088 WordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium 2025-03-28
CVE-2024-32728 WordPress Paid Membership Subscriptions plugin <= 2.11.0 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium 2024-04-24
CVE-2023-51522 WordPress Paid Membership Subscriptions plugin <= 2.10.4 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium 2024-03-15

All 13 known CVE vulnerabilities affecting Paid Member Subscriptions with full Chinese analysis, references, and POCs where available.