What’s Vulnerable › Products
Cozmoslabs Paid Member Subscriptions vulnerabilities
12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.
Check whether your Cozmoslabs Paid Member Subscriptions version is affected
Latest Cozmoslabs Paid Member Subscriptions vulnerabilities
- CVE-2026-112842 — WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerability (CVSS 6.5)
- CVE-2026-105317 — WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability (CVSS 8.5)
- CVE-2026-97249 — WordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerability (CVSS 5.3)
- CVE-2026-59539 — WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability (CVSS 7.5)
- CVE-2026-57348 — WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2)
- CVE-2026-39514 — WordPress Paid Member Subscriptions plugin <= 2.17.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2025-68514 — WordPress Paid Member Subscriptions plugin <= 2.16.8 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5)
- CVE-2025-58600 — WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability (CVSS 5.3)
- CVE-2025-54017 — WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability (CVSS 7.5)
- CVE-2025-49870 — WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability (CVSS 7.5)
- CVE-2025-31088 — WordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- CVE-2023-51522 — WordPress Paid Membership Subscriptions plugin <= 2.10.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8)