Membership & Content Restriction - Paid Member Subscriptions vulnerabilities

Product

Membership & Content Restriction - Paid Member Subscriptions

by Cozmoslabs · last CVE Jan 14, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 1High 2Medium 4Low 0

Severity

All severities7 Critical1 High2 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Membership & Content Restriction - Paid Member Subscriptions to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-12919	9.8	1%	Jan 14	The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Authentication Bypass in all versions up… Affected: before 2.13.8
CVE-2021-24728	8.8	2%	Sep 13	The Membership & Content Restriction – Paid Member Subscriptions WordPress plugin before 2.4.2 did not sanitise, validate or escape its order and orderby parameters before using… Affected: before 2.4.2
CVE-2024-10261	7.3	0%	Nov 9	The The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to arbitrary shortcode execution in all… Affected: before 2.13.1
CVE-2024-9222	6.1	0%	Oct 2	The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to… Affected: before 2.12.9
CVE-2024-11291	5.3	0%	Dec 18	Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure Affected: before 2.13.5
CVE-2024-1389	5.3	1%	Feb 29	The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to… Affected: before 2.11.2
CVE-2024-1390	4.3	1%	Feb 29	The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to… Affected: before 2.11.2