Approved changes feed: RSS · Atom

cpe:2.3:a:paidmembershipspro:paid_memberships_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPaidmembershipspro (5be0e243-6302-55d0-bb86-db15a10c203c)
ProductPaid Memberships Pro (55eedeaa-b60d-59fe-abca-a416eb8c125f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/strangerstudios/paid-memberships-pro purl2cpe 2026-06-01 10:14:20.494044
pkg:github/wp-plugins/paid-memberships-pro purl2cpe 2026-06-01 10:14:20.494047

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-30514 vulnerable 2026-06-08 06:35:30.496269 WordPress Paid Memberships Pro – Payfast Gateway Add On plugin <= 1.4.1 - Sensitive Data Exposure via Log File vulnerability
MEDIUM (5.3)
Insertion of Sensitive Information into Log File vulnerability in Paid Memberships Pro Paid Memberships Pro – Payfast Gateway Add On.This issue affects Paid Memberships Pro – Payfast Gateway Add On: from n/a through 1.4.1.
Published: 2024-03-29T15:40:18.934Z
Updated: 2026-04-28T16:09:25.779Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1287 vulnerable 2026-06-08 06:25:39.733359 Paid Memberships Pro - Member Directory Add On < 1.2.6 - Contributor+ Sensitive Information Disclosure via SQLi
The pmpro-member-directory WordPress plugin before 1.2.6 does not prevent users with at least the contributor role from leaking other users' sensitive information, including password hashes via an SQLi vector.
Published: 2024-07-30T06:00:06.053Z
Updated: 2025-08-27T12:00:38.906Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.