paid-member-subscriptions vulnerabilities
CVEs whose affected-version data names the paid-member-subscriptions package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-112842Medium· 6.5WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Member Subscriptions: from n/a through …
▾ SunlitCozmoslabs · paid-member-subscriptionsEPSS 0.21%via CVEORG
CVE-2026-105317High· 8.5Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions.
Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions.
▾ TwilightCozmoslabs · paid-member-subscriptionsEPSS 0.27%via NVD
CVE-2026-97249Medium· 5.3Unauthenticated Bypass Vulnerability in Paid Member Subscriptions <= 3.0.9 versions.
Unauthenticated Bypass Vulnerability in Paid Member Subscriptions <= 3.0.9 versions.
▾ SunlitCozmoslabs · paid-member-subscriptionsEPSS 0.19%via NVD