Advisories · Technology
Cozmoslabs Paid Member Subscriptions.
Every CVE that names Cozmoslabs Paid Member Subscriptions among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
WordPress Paid Member Subscriptions plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability
- Cozmoslabs Paid Member Subscriptions
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerability
- Cozmoslabs Paid Member Subscriptions
- Broken access control
- CVSS 8.5 High
WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability
- Cozmoslabs Paid Member Subscriptions
- SQL injection
- CVSS 5.3 Medium
WordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerability
- Cozmoslabs Paid Member Subscriptions
- Authentication bypass
- CVSS 7.5 High
WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability
- Cozmoslabs Paid Member Subscriptions
- Broken access control
- CVSS 7.2 High
WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability
- Cozmoslabs Paid Member Subscriptions
- Server-side request forgery (SSRF)
- CVSS 7.1 High
WordPress Paid Member Subscriptions plugin <= 2.17.3 - Reflected Cross Site Scripting (XSS) vulnerability
- Cozmoslabs Paid Member Subscriptions
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Paid Member Subscriptions plugin <= 2.16.8 - Insecure Direct Object References (IDOR) vulnerability
- Cozmoslabs Paid Member Subscriptions
- Broken access control
- CVSS 5.3 Medium
WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability
- Cozmoslabs Paid Member Subscriptions
- Broken access control
- CVSS 7.5 High
WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability
- Cozmoslabs Paid Member Subscriptions
- File inclusion
- CVSS 7.5 High
WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability
- Cozmoslabs Paid Member Subscriptions
- SQL injection
- CVSS 6.5 Medium
WordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) Vulnerability
- Cozmoslabs Paid Member Subscriptions
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
WordPress Paid Membership Subscriptions plugin <= 2.11.0 - Cross Site Request Forgery (CSRF) vulnerability
- Cozmoslabs Paid Member Subscriptions
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
WordPress Paid Membership Subscriptions plugin <= 2.10.4 - Cross Site Request Forgery (CSRF) vulnerability
- Cozmoslabs Paid Member Subscriptions
- Cross-site request forgery (CSRF)