Paid Memberships Pro vulnerabilities
We track 4 vulnerabilities in Paid Memberships Pro products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 1, 2024.
Latest Paid Memberships Pro vulnerabilities
- 9.8 Critical severity
Paid Memberships Pro: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in Paid Memberships Pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Paid Memberships Pro: from n/a through 3.0.4.
- 7.2 High severity
Paid Memberships Pro: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 3.0.5.
- 8.2 High severity
Paid Memberships Pro CCBill Gateway: Missing Authorization
Missing Authorization vulnerability in Paid Memberships Pro Paid Memberships Pro CCBill Gateway.This issue affects Paid Memberships Pro CCBill Gateway: from n/a through 0.3.
- 8.8 High severity
Paid Memberships Pro: Improper Neutralization of Special Elements used in an SQL Command
The Paid Memberships Pro WordPress plugin before 2.9.12 does not prevent subscribers from rendering shortcodes that concatenate attributes directly into an SQL query.