Strangerstudios vulnerabilities
We track 3 vulnerabilities in Strangerstudios products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 2, 2026.
Latest Strangerstudios vulnerabilities
- 7.1 High severity
Paid Memberships Pro – Content Restriction…: Missing Authorization
The Paid Memberships Pro plugin for WordPress is vulnerable to unauthorized modification and disruption of Stripe webhook configuration in all versions up to, and including, 3.6.5. This is due to missing capability checks on the `wp_ajax_pmpro_stripe_create_we
- 8.8 High severity
Paid Memberships Pro – Content Restriction…: Unrestricted Upload of File with Dangerous Type
The Paid Memberships Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'pmpro_paypalexpress_session_vars_for_user_fields' function in versions up to, and including, 2.12.3. This makes it possible f
- 9.8 Critical severity
Paid Memberships Pro WordPress Plugin: Improper Neutralization of Special Elements used in an SQL Command
The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route.