📦 Paid Memberships Pro

This vulnerability allows unauthenticated attackers to perform SQL injection attacks on WordPress sites running vulnerable versions of the Paid Memberships Pro plugin. Attackers can potentially read, ...

This CVE describes an Insecure Direct Object Reference (IDOR) vulnerability in the Paid Memberships Pro WordPress plugin. Attackers can manipulate user-controlled keys to bypass authorization checks a...

This SQL injection vulnerability in Paid Memberships Pro WordPress plugin allows authenticated attackers to execute arbitrary SQL commands on the database. It affects all WordPress sites running Paid ...

The pmpro-membership-maps WordPress plugin before version 0.7 contains an information disclosure vulnerability that allows users with at least contributor-level permissions to access sensitive members...

This CSRF vulnerability in Paid Memberships Pro WordPress plugin allows attackers to manipulate user memberships without authentication. Attackers can trick logged-in users into clicking malicious lin...