Paid Member Subscriptions vulnerabilities

4 known vulnerabilities in Paid Member Subscriptions from Cozmoslabs. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Paid Member Subscriptions: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2025-54017Aug 20, 2025Cozmoslabs

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows PHP Local File Inclusion.This issue affects Paid Member Subscriptions

• 7.5 High severity

  Paid Member Subscriptions: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-49870Jul 4, 2025Cozmoslabs

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows SQL Injection.This issue affects Paid Member Subscriptions: from n/a through <= 2.15.1.

• 7.3 High severity

  Paid Membership Subscriptions – Effortless…: Improper Control of Generation of Code

  CVE-2024-10261Nov 9, 2024Cozmoslabs

  The The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.13.0. This is due to the software allowing user

• 8.8 High severity

  Paid Member Subscriptions: Cross-Site Request Forgery

  CVE-2023-51522Mar 15, 2024Cozmoslabs

  Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Paid Member Subscriptions.This issue affects Paid Member Subscriptions: from n/a through 2.10.4.