CVE-2026-90950Medium 5.3Paid Member Subscriptions < 3.1.0 - Unauthenticated reCAPTCHA Bypass via Registration Form0.3%
CVE-2026-90951Low 3.7Paid Member Subscriptions < 3.1.0 - Unauthenticated In-Flight Checkout State Deletion via pms_process_payment0.2%
CVE-2026-90922Medium 5.3Paid Member Subscriptions < 3.0.9 - Unauthenticated Membership Payment Bypass via PayPal Standard Amount and Currency Mismatch0.3%
CVE-2026-14848Medium 5.4Paid Member Subscriptions < 3.0.8 - Subscriber+ Cross-User Subscription Hijack via process_checkout0.3%
CVE-2026-14849Low 3.7Paid Member Subscriptions < 3.0.7 - Unauthenticated Sensitive Information Exposure via Residual Export Files0.3%
CVE-2026-14847Medium 4.3Paid Member Subscriptions < 3.0.7 - Subscriber+ Payment Data Disclosure via IDOR0.3%