Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions

Vulnerabilities 45Slug paid-memberships-proLatest version 3.0.6WordPress.org →Closed
High 7.1 Closed
2026-05-05< 3.6.6

WordPress Paid Memberships Pro Plugin <= 3.6.5 is vulnerable to a medium priority Broken Access Control

PatchstackCVEEUVDWordfence
N/A Closed
< 2.12.7

Paid Memberships Pro &lt; 2.12.7 - Information Exposure in Debug Logs

WPScan
N/A Closed
< 2.12.9

WordPress Paid Memberships Pro Plugin <= 2.12.8 is vulnerable to Sensitive Data Exposure

Patchstack
N/A Closed
2024-02-08< 2.12.9

Paid Memberships Pro <= 2.12.8 - Authenticated (Contributor+) User Meta Disclosure

Wordfence
N/A Closed
2024-01-15< 2.12.7

WordPress Paid Memberships Pro Plugin <= 2.12.6 is vulnerable to Sensitive Data Exposure

Patchstack
N/A Closed
2024-01-12< 2.12.7

Paid Memberships Pro <= 2.12.6 - Information Exposure in Debug Logs

Wordfence
Medium 5.3 Closed
2024-12-21< 2.12.6

WordPress Paid Memberships Pro Plugin <= 2.12.5 is vulnerable to Broken Access Control

PatchstackCVEWordfenceWPScan
N/A Closed
< 1.5

Paid Memberships Pro 1.4.7 - adminpages/memberslist-csv.php Direct Request Member Personal Information Disclosure

WPScan
N/A Closed
< 2.0.6

Paid Memberships Pro &lt;= 2.0.5 - Authenticated Open Redirect

WPScan
N/A Closed
< 2.3.3

Paid Memberships Pro &lt; 2.3.3 - Authenticated SQL Injection

WPScan
N/A Closed
< 2.5.1

Paid Memberships Pro &lt; 2.5.1 - Authenticated Cross-Site Scripting (XSS)

WPScan
N/A Closed
< 2.5.3

Paid Membership Pro &lt; 2.5.3 - Unauthorised Order Information Disclosure

WPScan
N/A Closed
< 2.5.10

Paid Membership Pro &lt; 2.5.10 - Cross-Site Scripting (XSS)

WPScan
N/A Closed
2023-06-07< 2.4.3

CVE-2021-4342

CVE
N/A Closed
2019-06-01< 2.0.6

Paid Memberships Pro <= 2.0.5 - Open Redirect

Wordfence
N/A Closed
< 2.4.3

Various Affected Software (Various Versions) - Cross-Site Request Forgery Bypass

Wordfence
N/A Closed
2020-11-16< 2.5.1

Paid Memberships Pro <= 2.5.0 - Cross-Site Scripting

Wordfence
N/A Closed
2021-01-06< 2.5.3

Paid Memberships Pro – Restrict Member Access to Content, Courses, Communities – Free or Paid Subscriptions <= 2.5.2 - IDOR to Sensitive Information Disclosure

Wordfence
N/A Closed
2021-06-25< 2.5.10

Paid Memberships Pro – Restrict Member Access to Content, Courses, Communities – Free or Paid Subscriptions <= 2.5.9.1 - Cross-Site Scripting

Wordfence
N/A Closed
< 2.4.3

Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)

WPScan
N/A Closed
2014-08-01< 1.5

WordPress Paid Memberships Pro Plugin <= 1.4.7 - Information Disclosure

Patchstack
N/A Closed
2019-06-11< 2.0.6

WordPress Paid Memberships Pro plugin <= 2.0.5 - Authenticated Open Redirect vulnerability

Patchstack
N/A Closed
2020-09-16< 2.4.3

WordPress Paid Memberships Pro plugin <= 2.4.2 - Cross-Site Request Forgery (CSRF) vulnerability

Patchstack
N/A Closed
2020-12-03< 2.5.1

WordPress Paid Memberships Pro plugin <= 2.5 - Authenticated Cross-Site Scripting (XSS) vulnerability

Patchstack
N/A Closed
2021-02-06< 2.5.3

WordPress Paid Memberships Pro plugin <= 2.5.2 - Insecure Direct Object Reference & sensitive information disclosure vulnerability

Patchstack