What’s Vulnerable › Products

cozmoslabs Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your cozmoslabs Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction version is affected

Latest cozmoslabs Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction vulnerabilities

• CVE-2025-11835 — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.16.4 - Missing Authorization to Unauthenticated Arbitrary Member Subscription Auto Renewal (CVSS 5.3)
• CVE-2024-12919 — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id (CVSS 9.8)
• CVE-2024-11291 — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure (CVSS 5.3)
• CVE-2024-10261 — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.0 - Unauthenticated Arbitrary Shortcode Execution (CVSS 7.3)
• CVE-2024-9222 — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.12.8 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2024-1390 — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via creating_pricing_table_page (CVSS 4.3)
• CVE-2024-1389 — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return (CVSS 5.3)
• CVE-2021-24728 — Paid Member Subscriptions < 2.4.2 - Authenticated SQL Injection (CVSS 8.8)