Sstrangerstudios

Products

Exploited and recent CVEs

• CVE-2026-15016 Medium 6.4 Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions <= 3.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting 0.3%
• CVE-2026-4100 High 7.1 Paid Memberships Pro <= 3.6.5 - Missing Authorization to Authenticated (Subscriber+) Stripe Webhook Deletion and Payment Processing Disruption 0.2%
• CVE-2025-10125 Medium 6.4 Memberlite Shortcodes <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-11227 Medium 6.4 Memberlite Shortcodes <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via memberlite_accordion Shortcode 0.5%
• CVE-2024-1407 Medium 5.4 Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery to Membership Modification 0.2%
• CVE-2024-3215 Medium 5.3 Paid Memberships Pro <= 3.0.1 - Cross-Site Request Forgery 0.3%
• CVE-2024-0588 Medium 4.3 Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery 0.9%
• CVE-2024-0624 Medium 5.3 Paid Memberships Pro <= 2.12.7 - Cross-Site Request Forgery to Level Orders Update 1.0%
• CVE-2023-6855 Medium 5.3 Paid Memberships Pro <= 2.12.5 - Missing Authorization via API 0.5%
• CVE-2023-6187 High 7.5 Paid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File Upload 51.3%
• CVE-2020-36754 Medium 4.3 Paid Memberships Pro <= 2.4.2 - Cross-Site Request Forgery Bypass 0.5%