Paid Membership Subscriptions — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Paid Membership Subscriptions, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE ID	Title	CVSS	Severity	Published
CVE-2026-90950	Paid Member Subscriptions < 3.1.0 - Unauthenticated reCAPTCHA Bypass via Registration Form	5.3	Medium	2026-09-23
CVE-2026-90951	Paid Member Subscriptions < 3.1.0 - Unauthenticated In-Flight Checkout State Deletion via pms_process_payment	-	-	2026-09-23
CVE-2026-90922	Paid Member Subscriptions < 3.0.9 - Unauthenticated Membership Payment Bypass via PayPal Standard Amount and Currency Mismatch	-	-	2026-09-17
CVE-2026-14848	Paid Member Subscriptions < 3.0.8 - Subscriber+ Cross-User Subscription Hijack via process_checkout	-	-	2026-08-04
CVE-2026-14847	Paid Member Subscriptions < 3.0.7 - Subscriber+ Payment Data Disclosure via IDOR	-	-	2026-07-31
CVE-2026-14849	Paid Member Subscriptions < 3.0.7 - Unauthenticated Sensitive Information Exposure via Residual Export Files	-	-	2026-07-31

All 6 known CVE vulnerabilities affecting Paid Membership Subscriptions with full Chinese analysis, references, and POCs where available.