Stranger Studios
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Force First and Last Name as Display Name | 1 | – | Nov 12, 2023 |
| Paid Memberships | 1 | – | May 20, 2020 |
| Paid Memberships Pro | 1 | – | Mar 18, 2021 |
| Paid Memberships Pro - Add Member From Admin | 1 | – | Jun 26, 2026 |
Exploited and recent CVEs
- CVE-2026-57659 WordPress Paid Memberships Pro - Add Member From Admin plugin <= 0.7.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2023-28419 WordPress Force First and Last Name as Display Name Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF) 0.4%
- CVE-2021-20678 SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. 2.0%
- CVE-2020-5579 SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors. 1.2%