Product by Cozmoslabs

    Paid Member Subscriptions

    15 known vulnerabilities in Paid Member Subscriptions (Cozmoslabs), 0 of them actively exploited (CISA KEV).

    Key figures

    15

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Paid Member Subscriptions (Cozmoslabs)
    HighCVE-2026-105317

    WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability

    		8.5
    HighCVE-2025-54017

    WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability

    		7.5
    HighCVE-2026-59539

    Cozmoslabs Paid Member Subscriptions: Authorization Bypass Through User-Controlled Key

    		7.5
    MediumCVE-2026-112842

    WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerability

    		6.5
    MediumCVE-2026-119521

    WordPress Paid Member Subscriptions plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-119523

    WordPress Paid Member Subscriptions plugin <= 3.1.3 - Broken Access Control vulnerability

    		5.3
    HighCVE-2026-57348

    Cozmoslabs Paid Member Subscriptions: Server-Side Request Forgery (SSRF)

    		7.2
    MediumCVE-2025-68514

    Cozmoslabs Paid Member Subscriptions: Authorization Bypass Through User-Controlled Key

    		6.5
    MediumCVE-2026-97249

    WordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerability

    		5.3
    HighCVE-2026-39514

    Cozmoslabs Paid Member Subscriptions: Cross-site Scripting

    		7.1
    HighCVE-2025-49870

    WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability

    		7.5
    MediumCVE-2025-58600

    WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability

    		5.3
    MediumCVE-2025-31088

    WordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) Vulnerability

    		6.5
    HighCVE-2023-51522

    Cozmoslabs Paid Member Subscriptions: Cross-Site Request Forgery (CSRF)

    		4.3
    MediumCVE-2024-32728

    Cozmoslabs Paid Member Subscriptions: Cross-Site Request Forgery (CSRF)

    		4.3

    All products by Cozmoslabs