Medium 5.3
2025-11-28< 1.1.8
Subscriptions & Memberships for PayPal <= 1.1.7 - Missing Authorization
Minimum safe version
1.1.8
Update to 1.1.8 or later to address 6 fixable vulnerabilities
Subscriptions & Memberships for PayPal <= 1.1.7 - Missing Authorization
CVE-2025-12752
CVE-2024-13560
Multiple Plugins from WPPlugin - Reflected Cross-Site Scripting via page Parameter
Subscriptions & Memberships for PayPal <= 1.1.5 - Reflected Cross-Site Scripting
WordPress Subscriptions & Memberships for PayPal plugin <= 1.1.2 - Reflected Cross-Site Scripting (XSS) vulnerability