Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction, CVE-2026-90922

CVE, Research URL: CVE-2026-90922
Home page URL: Security reports for Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
Application: Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
Published on: Sep 17, 2026
Research Description: The Paid Membership Subscriptions WordPress plugin before 3.0.9 does not verify that the amount and currency reported by the payment provider match the pending payment before completing it, allowing unauthenticated users to obtain a paid membership by paying an arbitrary lower amount.
Affected versions: max 3.0.9.
Status: vulnerable

Paid Membership Subscriptions &#8211; Effortless Memberships, Recurring Payments &amp; Content Restriction, CVE-2026-90922