Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

Paid Member Subscriptions — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Paid Member Subscriptions, with AI-generated Chinese analysis, references, and POCs.

Vendor: Cozmoslabs

CVE IDTitleCVSSSeverityPaused
CVE-2025-68514 WordPress Paid Member Subscriptions plugin <= 2.16.8 - Insecure Direct Object References (IDOR) vulnerability CWE-639 8.1AIHighAI2026-02-20
CVE-2025-58600 WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability CWE-862 5.3 Medium2025-09-03
CVE-2025-54017 WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability CWE-98 7.5 High2025-08-20
CVE-2025-49870 WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability CWE-89 7.5 High2025-07-04
CVE-2025-31088 WordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium2025-03-28
CVE-2024-32728 WordPress Paid Membership Subscriptions plugin <= 2.11.0 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium2024-04-24
CVE-2023-51522 WordPress Paid Membership Subscriptions plugin <= 2.10.4 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium2024-03-15

All 7 known CVE vulnerabilities affecting Paid Member Subscriptions with full Chinese analysis, references, and POCs where available.