What’s Vulnerable › Products
Paid Membership Subscriptions vulnerabilities
6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Check whether your Paid Membership Subscriptions version is affected
Latest Paid Membership Subscriptions vulnerabilities
- CVE-2026-90950 — Paid Member Subscriptions < 3.1.0 - Unauthenticated reCAPTCHA Bypass via Registration Form (CVSS 5.3)
- CVE-2026-90951 — Paid Member Subscriptions < 3.1.0 - Unauthenticated In-Flight Checkout State Deletion via pms_process_payment (CVSS 3.7)
- CVE-2026-90922 — Paid Member Subscriptions < 3.0.9 - Unauthenticated Membership Payment Bypass via PayPal Standard Amount and Currency Mismatch (CVSS 5.3)
- CVE-2026-14848 — Paid Member Subscriptions < 3.0.8 - Subscriber+ Cross-User Subscription Hijack via process_checkout (CVSS 5.4)
- CVE-2026-14849 — Paid Member Subscriptions < 3.0.7 - Unauthenticated Sensitive Information Exposure via Residual Export Files (CVSS 3.7)
- CVE-2026-14847 — Paid Member Subscriptions < 3.0.7 - Subscriber+ Payment Data Disclosure via IDOR (CVSS 4.3)