Paid Membership Subscriptions
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:paid_membership_subscriptions:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Paid Membership Subscriptions (9dc9a959-5e51-560d-b459-2560c099dfbd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-90951 |
vulnerable | 2026-10-13 12:28:51.255298 |
Paid Member Subscriptions < 3.1.0 - Unauthenticated In-Flight Checkout State Deletion via pms_process_payment
The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not bind one of its unauthenticated payment actions to the requesting user, allowing someone who holds another member's in-flight payment identifier to delete that member's checkout state.
Published: 2026-09-23T06:00:22.140Z
Updated: 2026-09-23T10:52:58.058Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90950 |
vulnerable | 2026-10-13 12:28:51.212562 |
Paid Member Subscriptions < 3.1.0 - Unauthenticated reCAPTCHA Bypass via Registration Form
MEDIUM (5.3)
The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not verify the reCAPTCHA on its registration handler when a form field is absent from the request, allowing unauthenticated users to create accounts without solving the reCAPTCHA the site has enabled.
Published: 2026-09-23T10:11:04.690Z
Updated: 2026-09-23T10:48:31.853Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90922 |
vulnerable | 2026-10-13 12:28:51.160358 |
Paid Member Subscriptions < 3.0.9 - Unauthenticated Membership Payment Bypass via PayPal Standard Amount and Currency Mismatch
The Paid Membership Subscriptions WordPress plugin before 3.0.9 does not verify that the amount and currency reported by the payment provider match the pending payment before completing it, allowing unauthenticated users to obtain a paid membership by paying an arbitrary lower amount.
Published: 2026-09-17T06:00:12.342Z
Updated: 2026-09-17T12:27:29.613Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-14849 |
vulnerable | 2026-09-16 04:33:12.551032 |
Paid Member Subscriptions < 3.0.7 - Unauthenticated Sensitive Information Exposure via Residual Export Files
The Paid Membership Subscriptions WordPress plugin before 3.0.7 does not protect the member and payment export files it writes to a predictable location in the uploads directory, allowing unauthenticated users to download the exported member and payment data (including PII) while an export artifact is present.
Published: 2026-07-31T06:00:07.762Z
Updated: 2026-07-31T13:25:56.328Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-14848 |
vulnerable | 2026-09-16 04:33:12.243357 |
Paid Member Subscriptions < 3.0.8 - Subscriber+ Cross-User Subscription Hijack via process_checkout
The Paid Membership Subscriptions WordPress plugin before 3.0.8 does not verify that the subscription being modified through its change-subscription checkout belongs to the current user, allowing any authenticated user with Subscriber-level access and above to take over another member's subscription and overwrite its plan, status and expiration.
Published: 2026-08-04T06:00:10.035Z
Updated: 2026-08-04T17:32:15.169Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-14847 |
vulnerable | 2026-09-16 04:33:11.501019 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.