Vulnerabilities and Security Researches

Security report for CVE Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions > CVE-2023-23488

CVE, Research URL: CVE-2023-23488
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Published on: Jan 20, 2023
Research Description: The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route.
Affected versions: Min -, max 2.9.8.
Status: vulnerable