CVE-2024-37277

< 3.0.5

Authorization Bypass Through User-Controlled Key vulnerability in Paid Memberships Pro allows Accessing Functionality Not Properly

7.5HIGH

CVE-2024-1287

< 1.2.6

The pmpro-member-directory WordPress plugin before 1.2.6 does not prevent users with at least the contributor role from leaking ot

6.5MEDIUM

CVE-2024-1286

< 0.7

The pmpro-membership-maps WordPress plugin before 0.7 does not prevent users with at least the contributor role from leaking sensi

4.9MEDIUM

CVE-2024-37486

< 3.0.6

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paid Memberships Pro.This is

7.6HIGH

CVE-2023-39990

< 1.2.4

Missing Authorization vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 1.2.3.

5.4MEDIUM

CVE-2024-1407

< 3.0

The Paid Memberships Pro - Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cros

5.4MEDIUM

CVE-2024-3215

< 3.0.2

The Paid Memberships Pro - Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cros

5.3MEDIUM

CVE-2024-32794

< 3.0

Cross-Site Request Forgery (CSRF) vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through

4.3MEDIUM

CVE-2024-32793

< 3.0

Cross-Site Request Forgery (CSRF) vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through

5.4MEDIUM

CVE-2024-0588

< 3.0

The Paid Memberships Pro - Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cros

4.3MEDIUM

CVE-2024-1279

< 2.12.9

The Paid Memberships Pro WordPress plugin before 2.12.9 does not prevent user with at least the contributor role from leaking othe

4.3MEDIUM

CVE-2024-0624

<= 2.12.7

The Paid Memberships Pro - Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cros

5.3MEDIUM

CVE-2023-6855

<= 2.12.5

The Paid Memberships Pro - Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to unau

5.3MEDIUM

CVE-2023-6187

<= 2.12.3

The Paid Memberships Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in

7.5HIGH

CVE-2020-36754

<= 2.4.2

The Paid Memberships Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.2

4.3MEDIUM

CVE-2023-0631

< 2.9.12

The Paid Memberships Pro WordPress plugin before 2.9.12 does not prevent subscribers from rendering shortcodes that concatenate at

8.8HIGH

CVE-2022-4830

< 2.9.9

The Paid Memberships Pro WordPress plugin before 2.9.9 does not validate and escape some of its shortcode attributes before output

5.4MEDIUM

CVE-2022-4831

< 1.8.1

The Custom User Profile Fields for User Registration WordPress plugin before 1.8.1 does not validate and escape some of its shortc

5.4MEDIUM

CVE-2023-23488

< 2.9.8

The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the '

9.8CRITICAL

CVE-2021-25114

>= 2.4 and < 2.4.5

The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discount_code in one of its REST route (available to un

9.8CRITICAL

CVE-2021-24979

< 2.6.6

The Paid Memberships Pro WordPress plugin before 2.6.6 does not escape the s parameter before outputting it back in an attribute i

6.1MEDIUM

CVE-2021-20678

< 2.5.6

SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute a

8.8HIGH

CVE-2020-5579

< 2.3.3

SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute a

7.2HIGH

CVE-2015-5532

< 1.8.4.3

Multiple cross-site scripting (XSS) vulnerabilities in the Paid Memberships Pro (PMPro) plugin before 1.8.4.3 for WordPress allow

6.1MEDIUM

CVE-2014-8801

< 1.7.15

Directory traversal vulnerability in services/getfile.php in the Paid Memberships Pro plugin before 1.7.15 for WordPress allows re