Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction, CVE-2021-24728

CVE, Research URL: CVE-2021-24728
Home page URL: Security reports for Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
Application: Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
Published on: Sep 13, 2021
Research Description: The Membership & Content Restriction – Paid Member Subscriptions WordPress plugin before 2.4.2 did not sanitise, validate or escape its order and orderby parameters before using them in SQL statement, leading to Authenticated SQL Injections in the Members and Payments pages.
Affected versions: Min -, max 2.4.2.
Status: vulnerable

Paid Membership Subscriptions &#8211; Effortless Memberships, Recurring Payments &amp; Content Restriction, CVE-2021-24728