Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
strangerstudios paid memberships pro vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-0631
The Paid Memberships Pro WordPress plugin prior to 2.9.12 does not prevent subscribers from rendering shortcodes that concatenate attributes directly into an SQL query.
Strangerstudios Paid Memberships Pro
6.5
CVSSv2
CVE-2021-20678
SQL injection vulnerability in the Paid Memberships Pro versions before 2.5.6 allows remote authenticated malicious users to execute arbitrary SQL commands via unspecified vectors.
Strangerstudios Paid Memberships Pro
NA
CVE-2023-6187
The Paid Memberships Pro plugin for WordPress is vulnerable to arbitrary file uploads to insufficient file type validation in the 'pmpro_paypalexpress_session_vars_for_user_fields' function in versions up to, and including, 2.12.3. This makes it possible for authenticat...
Strangerstudios Paid Memberships Pro
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2