Filtered by vendor Paidmembershipspro Subscriptions
Filtered by product Paid Memberships Pro Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-1287 2 Paidmembershipspro, Strangerstudios 2 Paid Memberships Pro, Paid Memberships Pro 2025-08-27 6.5 Medium
The pmpro-member-directory WordPress plugin before 1.2.6 does not prevent users with at least the contributor role from leaking other users' sensitive information, including password hashes via an SQLi vector.
CVE-2024-37277 2 Paidmembershipspro, Strangerstudios 2 Paid Memberships Pro, Paid Memberships Pro 2025-01-22 7.5 High
Authorization Bypass Through User-Controlled Key vulnerability in Paid Memberships Pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Paid Memberships Pro: from n/a through 3.0.4.
CVE-2024-30514 1 Paidmembershipspro 1 Paid Memberships Pro 2024-11-21 5.3 Medium
Insertion of Sensitive Information into Log File vulnerability in Paid Memberships Pro Paid Memberships Pro – Payfast Gateway Add On.This issue affects Paid Memberships Pro – Payfast Gateway Add On: from n/a through 1.4.1.