Paid Memberships Pro
Approved changes feed: RSS · Atom
cpe:2.3:a:strangerstudios:paid_memberships_pro:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Strangerstudios (f9d072e2-7c75-5015-996e-827b25a5e6a5) |
|---|---|
| Product | Paid Memberships Pro (9406672f-ffac-56a3-8062-126e3daed202) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/strangerstudios/paid-memberships-pro |
purl2cpe | 2026-06-01 10:11:19.024139 |
pkg:github/wp-plugins/paid-memberships-pro |
purl2cpe | 2026-06-01 10:11:19.024141 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-3215 |
vulnerable | 2026-06-08 06:41:52.706556 |
Paid Memberships Pro <= 3.0.1 - Cross-Site Request Forgery
MEDIUM (5.3)
The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on the pmpro_update_level_group_order() function. This makes it possible for unauthenticated attackers to update order levels via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Published: 2024-05-02T16:52:29.758Z
Updated: 2026-04-08T17:14:14.967Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37486 |
vulnerable | 2026-06-08 06:39:47.697296 |
WordPress Paid Memberships Pro plugin <= 3.0.5 - Authenticated SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 3.0.5.
Published: 2024-07-09T09:01:12.664Z
Updated: 2026-04-28T16:09:59.829Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37277 |
vulnerable | 2026-06-08 06:39:47.043191 |
WordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerability
HIGH (7.5)
Authorization Bypass Through User-Controlled Key vulnerability in Paid Memberships Pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Paid Memberships Pro: from n/a through 3.0.4.
Published: 2024-11-01T14:18:26.766Z
Updated: 2026-04-28T16:09:58.258Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32794 |
vulnerable | 2026-06-08 06:37:24.009887 |
WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 2.12.10.
Published: 2024-04-24T14:55:50.445Z
Updated: 2026-04-28T16:09:40.530Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32793 |
vulnerable | 2026-06-08 06:37:24.009245 |
WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 2.12.10.
Published: 2024-04-24T14:56:55.616Z
Updated: 2026-04-28T16:09:40.577Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1407 |
vulnerable | 2026-06-08 06:25:40.019360 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1287 |
vulnerable | 2026-06-08 06:25:39.734194 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1286 |
vulnerable | 2026-06-08 06:25:39.731543 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1279 |
vulnerable | 2026-06-08 06:25:39.722149 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0624 |
vulnerable | 2026-06-08 06:22:01.520306 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0588 |
vulnerable | 2026-06-08 06:22:01.420023 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6855 |
vulnerable | 2026-06-08 06:21:56.058892 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6187 |
vulnerable | 2026-06-08 06:19:46.521949 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39990 |
vulnerable | 2026-06-08 06:09:38.248453 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23488 |
vulnerable | 2026-06-08 05:56:02.773623 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0631 |
vulnerable | 2026-06-08 05:52:32.109142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4830 |
vulnerable | 2026-06-08 05:52:00.443814 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25114 |
vulnerable | 2026-06-08 05:30:39.989626 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24979 |
vulnerable | 2026-06-08 05:30:39.739517 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20678 |
vulnerable | 2026-06-08 05:29:10.100745 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5579 |
vulnerable | 2026-06-08 05:26:43.153816 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36754 |
vulnerable | 2026-06-08 05:25:49.544256 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5532 |
vulnerable | 2026-06-08 05:06:50.351461 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8801 |
vulnerable | 2026-06-08 05:06:10.182764 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.