Membership & Content Restriction - Paid Member Subscriptions vulnerabilities

2 known vulnerabilities in Membership & Content Restriction - Paid Member Subscriptions from Cozmoslabs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Paid Membership Subscriptions – Effortless…: Improper Authentication

  CVE-2024-12919Jan 14, 2025Cozmoslabs

  The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.13.7. This is due to the pms_pb_payment_redirect_link funct

• 7.3 High severity

  Paid Membership Subscriptions – Effortless…: Improper Control of Generation of Code

  CVE-2024-10261Nov 9, 2024Cozmoslabs

  The The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.13.0. This is due to the software allowing user