Advisories · Technology
Paid Membership Subscriptions.
Every CVE that names Paid Membership Subscriptions among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Paid Member Subscriptions < 3.1.0 - Unauthenticated reCAPTCHA Bypass via Registration Form
- Paid Membership Subscriptions
- CWE-693
- CVSS 3.7 Low
Paid Member Subscriptions < 3.1.0 - Unauthenticated In-Flight Checkout State Deletion via pms_process_payment
- Paid Membership Subscriptions
- Broken access control
- CVSS 5.3 Medium
Paid Member Subscriptions < 3.0.9 - Unauthenticated Membership Payment Bypass via PayPal Standard Amount and Currency Mismatch
- Paid Membership Subscriptions
- Broken access control
- CVSS 5.4 Medium
Paid Member Subscriptions < 3.0.8 - Subscriber+ Cross-User Subscription Hijack via process_checkout
- Paid Membership Subscriptions
- Broken access control
- CVSS 3.7 Low
Paid Member Subscriptions < 3.0.7 - Unauthenticated Sensitive Information Exposure via Residual Export Files
- Paid Membership Subscriptions
- Information disclosure
- CVSS 4.3 Medium
Paid Member Subscriptions < 3.0.7 - Subscriber+ Payment Data Disclosure via IDOR
- Paid Membership Subscriptions
- Broken access control