cleantalk

Vulnerabilities and Security Researches

Security report for CVE Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions > CVE-2020-5579

CVE, Research URL

CVE-2020-5579

Published on
May 20, 2020
Research Description
SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors.
Affected versions
Min -, max 2.0.6.
Status
vulnerable