Vulnerabilities and security researches forpaid-memberships-pro paid-memberships-pro

Direction: ascending

Jun 06, 2024

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2015-5532

CVE, Research URL: CVE-2015-5532
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Oct 23, 2017
Research Description: Multiple cross-site scripting (XSS) vulnerabilities in the Paid Memberships Pro (PMPro) plugin before 1.8.4.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) s parameter to membershiplevels.php, (2) memberslist.php, or (3) orders.php in adminpages/ or the (4) edit parameter to adminpages/membershiplevels.php.
Affected versions: max 1.8.4.3.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2021-25114

CVE, Research URL: CVE-2021-25114
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Feb 07, 2022
Research Description: The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discount_code in one of its REST route (available to unauthenticated users) before using it in a SQL statement, leading to a SQL injection
Affected versions: max 2.6.7.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2020-5579

CVE, Research URL: CVE-2020-5579
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: May 20, 2020
Research Description: SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors.
Affected versions: max 2.3.3.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2021-24979

CVE, Research URL: CVE-2021-24979
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Dec 27, 2021
Research Description: The Paid Memberships Pro WordPress plugin before 2.6.6 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting
Affected versions: max 2.6.6.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2021-20678

CVE, Research URL: CVE-2021-20678
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Mar 18, 2021
Research Description: SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
Affected versions: max 2.5.6.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2023-23488

CVE, Research URL: CVE-2023-23488
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Jan 20, 2023
Research Description: The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route.
Affected versions: max 2.9.8.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2014-8801

CVE, Research URL: CVE-2014-8801
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Nov 28, 2014
Research Description: Directory traversal vulnerability in services/getfile.php in the Paid Memberships Pro plugin before 1.7.15 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the QUERY_STRING in a getfile action to wp-admin/admin-ajax.php.
Affected versions: max 1.7.15.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2022-4830

CVE, Research URL: CVE-2022-4830
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Feb 13, 2023
Research Description: The Paid Memberships Pro WordPress plugin before 2.9.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
Affected versions: max 2.9.9.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2023-6855

CVE, Research URL: CVE-2023-6855
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Jan 11, 2024
Research Description: The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to unauthorized modification of membership levels created by the plugin due to an incorrectly implemented capability check in the pmpro_rest_api_get_permissions_check function in all versions up to 2.12.5 (inclusive). This makes it possible for unauthenticated attackers to change membership levels including prices.
Affected versions: max 2.12.6.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2023-0631

CVE, Research URL: CVE-2023-0631
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Mar 20, 2023
Research Description: The Paid Memberships Pro WordPress plugin before 2.9.12 does not prevent subscribers from rendering shortcodes that concatenate attributes directly into an SQL query.
Affected versions: max 2.9.12.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2020-36754

CVE, Research URL: CVE-2020-36754
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Oct 20, 2023
Research Description: The Paid Memberships Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.2. This is due to missing or incorrect nonce validation on the pmpro_page_save() function. This makes it possible for unauthenticated attackers to save pages via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 2.4.3.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2023-6187

CVE, Research URL: CVE-2023-6187
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Nov 18, 2023
Research Description: The Paid Memberships Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'pmpro_paypalexpress_session_vars_for_user_fields' function in versions up to, and including, 2.12.3. This makes it possible for authenticated attackers with subscriber privileges or above, to upload arbitrary files on the affected site's server which may make remote code execution possible. This can be exploited if 2Checkout (deprecated since version 2.6) or PayPal Express is set as the payment method and a custom user field is added that is only visible at profile, and not visible at checkout according to its settings.
Affected versions: max 2.12.4.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2024-0624

CVE, Research URL: CVE-2024-0624
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Jan 25, 2024
Research Description: The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.12.7. This is due to missing or incorrect nonce validation on the pmpro_update_level_order() function. This makes it possible for unauthenticated attackers to update the order of levels via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 2.12.8.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2024-1279

CVE, Research URL: CVE-2024-1279
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Mar 11, 2024
Research Description: The Paid Memberships Pro WordPress plugin before 2.12.9 does not prevent user with at least the contributor role from leaking other users' sensitive metadata.
Affected versions: max 2.12.9.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2024-0588

CVE, Research URL: CVE-2024-0588
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Apr 10, 2024
Research Description: The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.12.10. This is due to missing nonce validation on the pmpro_lifter_save_streamline_option() function. This makes it possible for unauthenticated attackers to enable the streamline setting with Lifter LMS via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. CVE-2024-32793 and CVE-2024-32794 appear to be a duplicate of this issue.
Affected versions: max 3.0.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2024-3215

CVE, Research URL: CVE-2024-3215
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: May 02, 2024
Research Description: The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on the pmpro_update_level_group_order() function. This makes it possible for unauthenticated attackers to update order levels via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 3.0.2.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2024-32794

CVE, Research URL: CVE-2024-32794
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Apr 24, 2024
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 2.12.10.
Affected versions: max 3.0.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2024-32793

CVE, Research URL: CVE-2024-32793
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Apr 24, 2024
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 2.12.10.
Affected versions: max 3.0.
Status: vulnerable

Jun 20, 2024

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2024-1407

CVE, Research URL: CVE-2024-1407
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Jun 19, 2024
Research Description: The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.12.10. This is due to missing or incorrect nonce validation on multiple functions. This makes it possible for unauthenticated attackers to subscribe to, modify, or cancel membership for a user via a forged request granted they can trick a user into performing an action such as clicking on a link.
Affected versions: max 3.0.
Status: vulnerable

Jul 02, 2024

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2024-37277

CVE, Research URL: CVE-2024-37277
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Nov 01, 2024
Research Description: Authorization Bypass Through User-Controlled Key vulnerability in Paid Memberships Pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Paid Memberships Pro: from n/a through 3.0.4.
Affected versions: max 3.0.5.
Status: vulnerable

Jul 08, 2024

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2024-37486

CVE, Research URL: CVE-2024-37486
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Jul 09, 2024
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 3.0.5.
Affected versions: max 3.0.6.
Status: vulnerable

May 04, 2026

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2026-4100

CVE, Research URL: CVE-2026-4100
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: May 02, 2026
Research Description: The Paid Memberships Pro plugin for WordPress is vulnerable to unauthorized modification and disruption of Stripe webhook configuration in all versions up to, and including, 3.6.5. This is due to missing capability checks on the `wp_ajax_pmpro_stripe_create_webhook`, `wp_ajax_pmpro_stripe_delete_webhook`, and `wp_ajax_pmpro_stripe_rebuild_webhook` AJAX handlers. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete, create, or rebuild the site's Stripe webhook, disrupting all payment processing, subscription renewal synchronization, cancellation handling, and failed payment management.
Affected versions: max 3.6.6.
Status: vulnerable

Jun 16, 2026

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 12bb368966fda8d01c016c21cbcf9e6148faea48

CVE, Research URL: 12bb368966fda8d01c016c21cbcf9e6148faea48
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Jun 11, 2019
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.0.6 (closed) WordPress Paid Memberships Pro plugin <= 2.0.5 - Authenticated Open Redirect vulnerability Authenticated Open Redirect vulnerability found in WordPress Paid Memberships Pro plugin (versions <= 2.0.5).
Affected versions: max 2.0.6.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 075e2508f6265bb9185859a751fb361a57d5c2e5

CVE, Research URL: 075e2508f6265bb9185859a751fb361a57d5c2e5
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Sep 16, 2020
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.4.3 (closed) WordPress Paid Memberships Pro plugin <= 2.4.2 - Cross-Site Request Forgery (CSRF) vulnerability Cross-Site Request Forgery (CSRF) vulnerability found by Jerome Bruandet (NinTechNet) in WordPress Paid Memberships Pro plugin (versions <= 2.4.2).
Affected versions: max 2.4.3.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 8c415a497ab558027935939e88dd2f73b1679ad6

CVE, Research URL: 8c415a497ab558027935939e88dd2f73b1679ad6
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Nov 16, 2020
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.5.1 (closed) Paid Memberships Pro <= 2.5.0 - Cross-Site Scripting The Paid Memberships Pro plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 2.5.0 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.
Affected versions: max 2.5.1.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # ccf0f6ba56aabac1f34459b98c761db0e9d6cc23

CVE, Research URL: ccf0f6ba56aabac1f34459b98c761db0e9d6cc23
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Jun 01, 2019
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.0.6 (closed) Paid Memberships Pro <= 2.0.5 - Open Redirect The Paid Memberships Pro plugin for WordPress is vulnerable to an open redirect vulnerability in versions up to, and including, 2.0.5. This is due to missing redirect location verification on the pmpro_redirect_to_logged_in() function. This makes it possible for authenticated attackers to redirect traffic to a different website, where they could potentially perform other attacks; such as phishing.
Affected versions: max 2.0.6.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # bf321dc8377d4f50d64cf3be1ac75ba081188cb3

CVE, Research URL: bf321dc8377d4f50d64cf3be1ac75ba081188cb3
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Dec 03, 2020
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.5.1 (closed) WordPress Paid Memberships Pro plugin <= 2.5 - Authenticated Cross-Site Scripting (XSS) vulnerability Authenticated Cross-Site Scripting (XSS) vulnerability found by Ron Masas from (Checkmarx) in WordPress Paid Memberships Pro plugin (versions <= 2.5).
Affected versions: max 2.5.1.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # aa47a464-af97-43bc-b6cb-75a08ce3ece7

CVE, Research URL: aa47a464-af97-43bc-b6cb-75a08ce3ece7
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: -
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.4.3 (closed) Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF) NinTechNet discovered multiple WordPress plugins and themes vulnerable to Cross-Site Request Forgery (CSRF). The items only check the CSRF nonce if it has been provided, making them vulnerable to CSRF attacks if the nonce is removed. This is due to the confusing use of logic operators when verifying the nonces.
Affected versions: max 2.4.3.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # bc1806a73d52da416d296180a8da4bf979fefb71

CVE, Research URL: bc1806a73d52da416d296180a8da4bf979fefb71
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Jun 25, 2021
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.5.10 (closed) Paid Memberships Pro – Restrict Member Access to Content, Courses, Communities – Free or Paid Subscriptions <= 2.5.9.1 - Cross-Site Scripting The Paid Memberships Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the edit order page in versions up to, and including, 2.5.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: max 2.5.10.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # ac7b051ed78b5cf1e4407d9f5099adcfe7c193b2

CVE, Research URL: ac7b051ed78b5cf1e4407d9f5099adcfe7c193b2
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Feb 06, 2021
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.5.3 (closed) WordPress Paid Memberships Pro plugin <= 2.5.2 - Insecure Direct Object Reference & sensitive information disclosure vulnerability Insecure Direct Object Reference & sensitive information disclosure vulnerability found in WordPress Paid Memberships Pro plugin (versions <= 2.5.2).
Affected versions: max 2.5.3.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 213ad777f574b5d7172e7bacd1ae7aae65344485

CVE, Research URL: 213ad777f574b5d7172e7bacd1ae7aae65344485
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Aug 01, 2014
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 1.5 (closed) WordPress Paid Memberships Pro Plugin <= 1.4.7 - Information Disclosure This plugin is prone to a adminpages/memberslist-csv.php direct request member personal information disclosure vulnerability. Update the plugin.
Affected versions: max 1.5.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 6126f80d6fcc17f2080b49119a502e1ea9dfbd45

CVE, Research URL: 6126f80d6fcc17f2080b49119a502e1ea9dfbd45
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Jan 06, 2021
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.5.3 (closed) Paid Memberships Pro – Restrict Member Access to Content, Courses, Communities – Free or Paid Subscriptions <= 2.5.2 - IDOR to Sensitive Information Disclosure The Paid Memberships Pro – Restrict Member Access to Content, Courses, Communities – Free or Paid Subscriptions plugin for WordPress is vulnerable to sensitive information disclosure due to incorrect user validation and capabiltiy checking on the pmpro_get_order_json() function that made it possible for attackers to download order data for other users in versions up to, and including 2.5.2.
Affected versions: max 2.5.3.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # e03420c55099714ac90da016761d318e5e1cb6db

CVE, Research URL: e03420c55099714ac90da016761d318e5e1cb6db
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: -
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.4.3 (closed) 404 Page Not Found
Affected versions: max 2.4.3.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # e13dff6e-bd06-4773-8e49-36f71ae14876

CVE, Research URL: e13dff6e-bd06-4773-8e49-36f71ae14876
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: -
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.5.1 (closed) Paid Memberships Pro < 2.5.1 - Authenticated Cross-Site Scripting (XSS) The Paid Memberships Pro WordPress plugin, versions less than 2.5.1, were affected by an Authenticated Cross-Site Scripting (XSS) vulnerability in the 'page ' paramater of the Members List page of the dashboard.
Affected versions: max 2.5.1.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # ab6f0e23-a55b-4f35-9b45-de2b155408fb

CVE, Research URL: ab6f0e23-a55b-4f35-9b45-de2b155408fb
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: -
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.0.6 (closed) Paid Memberships Pro <= 2.0.5 - Authenticated Open Redirect The Paid Memberships Pro WordPress plugin was affected by an Authenticated Open Redirect security vulnerability.
Affected versions: max 2.0.6.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 83143b8a4065f857319774a05d1bf3ae2a5946c1

CVE, Research URL: 83143b8a4065f857319774a05d1bf3ae2a5946c1
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Jan 12, 2024
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.12.7 (closed) Paid Memberships Pro <= 2.12.6 - Information Exposure in Debug Logs The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.12.6 via debug logs. This makes it possible for unauthenticated attackers to extract sensitive data including user passwords through debug logs.
Affected versions: max 2.12.7.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 7e4a1c1dd7a2f22807582810d8c4f027e4ee9436

CVE, Research URL: 7e4a1c1dd7a2f22807582810d8c4f027e4ee9436
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Feb 08, 2024
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.12.9 (closed) Paid Memberships Pro <= 2.12.8 - Authenticated (Contributor+) User Meta Disclosure The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.12.8 via the pmpro_member shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to extract potentially sensitive data about users by utilizing the shortcode to display user meta field.
Affected versions: max 2.12.9.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # f82e76e5-94df-49e4-8f10-6524e26b0284

CVE, Research URL: f82e76e5-94df-49e4-8f10-6524e26b0284
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: -
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.5.3 (closed) Paid Membership Pro < 2.5.3 - Unauthorised Order Information Disclosure The pmpro_get_order_json AJAX action, available to authenticated user did not check for authorisation, allowing any authenticated users to retrieve arbitrary order information (such as customer names, email addresses, and order numbers) via the order_id parameter.
Affected versions: max 2.5.3.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 640a2075f10b0c1b166d92de317f9f28590ab698

CVE, Research URL: 640a2075f10b0c1b166d92de317f9f28590ab698
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Jan 15, 2024
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.12.7 (closed) WordPress Paid Memberships Pro Plugin <= 2.12.6 is vulnerable to Sensitive Data Exposure Update the WordPress Paid Memberships Pro plugin to the latest available version (at least 2.12.7). WordFence discovered and reported this Sensitive Data Exposure vulnerability in WordPress Paid Memberships Pro Plugin. This vulnerability has been fixed in version 2.12.7. Have additional information or questions about this entry? Get in touch.
Affected versions: max 2.12.7.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 2ea15a69-32e5-45c2-a5dc-37527ac05645

CVE, Research URL: 2ea15a69-32e5-45c2-a5dc-37527ac05645
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: -
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.3.3 (closed) Paid Memberships Pro < 2.3.3 - Authenticated SQL Injection A high privileged user (administrator) could perform SQL injection attacks when adding new orders in the dashboard.
Affected versions: max 2.3.3.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 2bad465e-7a8a-4df1-aa5e-745c0eb9a268

CVE, Research URL: 2bad465e-7a8a-4df1-aa5e-745c0eb9a268
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: -
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 1.5 (closed) Paid Memberships Pro 1.4.7 - adminpages/memberslist-csv.php Direct Request Member Personal Information Disclosure The Paid Memberships Pro WordPress plugin was affected by an adminpages/memberslist-csv.php Direct Request Member Personal Information Disclosure security vulnerability.
Affected versions: max 1.5.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 94ed6938-ff87-4619-be3a-582b6145d53b

CVE, Research URL: 94ed6938-ff87-4619-be3a-582b6145d53b
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: -
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.5.10 (closed) Paid Membership Pro < 2.5.10 - Cross-Site Scripting (XSS) The plugin was affected by a. Cross-Site Scripting issue in the edit order page or the admin dashboard
Affected versions: max 2.5.10.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 06af34a928696408c8eb7b0b5504ce16bbde9dc2

CVE, Research URL: 06af34a928696408c8eb7b0b5504ce16bbde9dc2
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: -
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.12.9 (closed) WordPress Paid Memberships Pro Plugin <= 2.12.8 is vulnerable to Sensitive Data Exposure Update the WordPress Paid Memberships Pro plugin to the latest available version (at least 2.12.9). Scott Kingsley Clark discovered and reported this Sensitive Data Exposure vulnerability in WordPress Paid Memberships Pro Plugin. This vulnerability has been fixed in version 2.12.9. Have additional information or questions about this entry? Get in touch.
Affected versions: max 2.12.9.
Status: vulnerable

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 2cbbb800-ff5b-4c5e-8500-2554ff4c3001

CVE, Research URL: 2cbbb800-ff5b-4c5e-8500-2554ff4c3001
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: -
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.12.7 (closed) Paid Memberships Pro < 2.12.7 - Information Exposure in Debug Logs The plugin is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.12.6 via debug logs. This makes it possible for unauthenticated attackers to extract sensitive data including user passwords through debug logs.
Affected versions: max 2.12.7.
Status: vulnerable

Jul 29, 2026

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2026-15016

CVE, Research URL: CVE-2026-15016
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Date: Jul 28, 2026
Research Description: The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Readonly User Field via [pmpro_member_profile_edit] Shortcode in all versions up to, and including, 3.8.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: max 3.8.2.
Status: vulnerable

Vulnerabilities and security researches forpaid-memberships-pro paid-memberships-pro

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2015-5532

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2021-25114

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2020-5579

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2021-24979

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2021-20678

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2023-23488

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2014-8801

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2022-4830

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2023-6855

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2023-0631

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2020-36754

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2023-6187

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2024-0624

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2024-1279

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2024-0588

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2024-3215

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2024-32794

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2024-32793

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2024-1407

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2024-37277

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2024-37486

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2026-4100

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # 12bb368966fda8d01c016c21cbcf9e6148faea48

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # 075e2508f6265bb9185859a751fb361a57d5c2e5

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # 8c415a497ab558027935939e88dd2f73b1679ad6

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # ccf0f6ba56aabac1f34459b98c761db0e9d6cc23

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # bf321dc8377d4f50d64cf3be1ac75ba081188cb3

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # aa47a464-af97-43bc-b6cb-75a08ce3ece7

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # bc1806a73d52da416d296180a8da4bf979fefb71

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # ac7b051ed78b5cf1e4407d9f5099adcfe7c193b2

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # 213ad777f574b5d7172e7bacd1ae7aae65344485

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # 6126f80d6fcc17f2080b49119a502e1ea9dfbd45

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # e03420c55099714ac90da016761d318e5e1cb6db

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # e13dff6e-bd06-4773-8e49-36f71ae14876

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # ab6f0e23-a55b-4f35-9b45-de2b155408fb

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # 83143b8a4065f857319774a05d1bf3ae2a5946c1

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # 7e4a1c1dd7a2f22807582810d8c4f027e4ee9436

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # f82e76e5-94df-49e4-8f10-6524e26b0284

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # 640a2075f10b0c1b166d92de317f9f28590ab698

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # 2ea15a69-32e5-45c2-a5dc-37527ac05645

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # 2bad465e-7a8a-4df1-aa5e-745c0eb9a268

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # 94ed6938-ff87-4619-be3a-582b6145d53b

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # 06af34a928696408c8eb7b0b5504ce16bbde9dc2

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # 2cbbb800-ff5b-4c5e-8500-2554ff4c3001

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions # CVE-2026-15016

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2015-5532

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2021-25114

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2020-5579

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2021-24979

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2021-20678

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2023-23488

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2014-8801

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2022-4830

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2023-6855

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2023-0631

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2020-36754

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2023-6187

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2024-0624

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2024-1279

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2024-0588

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2024-3215

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2024-32794

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2024-32793

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2024-1407

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2024-37277

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2024-37486

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2026-4100

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 12bb368966fda8d01c016c21cbcf9e6148faea48

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 075e2508f6265bb9185859a751fb361a57d5c2e5

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 8c415a497ab558027935939e88dd2f73b1679ad6

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # ccf0f6ba56aabac1f34459b98c761db0e9d6cc23

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # bf321dc8377d4f50d64cf3be1ac75ba081188cb3

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # aa47a464-af97-43bc-b6cb-75a08ce3ece7

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # bc1806a73d52da416d296180a8da4bf979fefb71

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # ac7b051ed78b5cf1e4407d9f5099adcfe7c193b2

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 213ad777f574b5d7172e7bacd1ae7aae65344485

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 6126f80d6fcc17f2080b49119a502e1ea9dfbd45

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # e03420c55099714ac90da016761d318e5e1cb6db

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # e13dff6e-bd06-4773-8e49-36f71ae14876

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # ab6f0e23-a55b-4f35-9b45-de2b155408fb

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 83143b8a4065f857319774a05d1bf3ae2a5946c1

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 7e4a1c1dd7a2f22807582810d8c4f027e4ee9436

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # f82e76e5-94df-49e4-8f10-6524e26b0284

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 640a2075f10b0c1b166d92de317f9f28590ab698

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 2ea15a69-32e5-45c2-a5dc-37527ac05645

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 2bad465e-7a8a-4df1-aa5e-745c0eb9a268

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 94ed6938-ff87-4619-be3a-582b6145d53b

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 06af34a928696408c8eb7b0b5504ce16bbde9dc2

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # 2cbbb800-ff5b-4c5e-8500-2554ff4c3001

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions # CVE-2026-15016