Log in Start free

Paid Memberships Pro

Products

ProductCVEsExploitedLatest
Paid Memberships Pro5–Nov 1, 2024
Paid Memberships Pro – Mailchimp Add On1–Mar 31, 2024
Paid Memberships Pro – Payfast Gateway Add On1–Mar 29, 2024
Paid Memberships Pro CCBill Gateway1–Jun 19, 2024

Exploited and recent CVEs

  • CVE-2024-37277 High 7.5 WordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerability 0.7%
  • CVE-2024-37486 High 7.6 WordPress Paid Memberships Pro plugin <= 3.0.5 - Authenticated SQL Injection vulnerability 0.7%
  • CVE-2023-39990 Medium 5.4 WordPress Paid Memberships Pro plugin <= 1.2.3 - Broken Access Control vulnerability 0.5%
  • CVE-2023-40608 High 8.2 WordPress Paid Memberships Pro CCBill Gateway plugin <= 0.3 - Unauthenticated Broken Access Control vulnerability 0.4%
  • CVE-2024-32793 Medium 5.4 WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-32794 Medium 4.3 WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-30523 Medium 5.3 WordPress Paid Memberships Pro – Mailchimp Add On plugin <= 2.3.4 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2024-30514 Medium 5.3 WordPress Paid Memberships Pro – Payfast Gateway Add On plugin <= 1.4.1 - Sensitive Data Exposure via Log File vulnerability 0.5%