strangerstudios

9 results · Clear filters · Feed

• Medium 6.4
  CVE-2026-15016

  Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions <= 3.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting

  The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Readonly User Field via [pmpro_member_profile_edit] Shortcode in all versions up to, and including, 3…

  strangerstudios Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions Web / CMS
  Jul 28, 2026
• Medium 6.4
  CVE-2025-10125

  Memberlite Shortcodes <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

  The Memberlite Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugins's 'row' shortcode in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping on user supplied attributes. Thi…

  strangerstudios Memberlite Shortcodes Web / CMS
  Sep 17, 2025
• Medium 6.4
  CVE-2024-11227

  Memberlite Shortcodes <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via memberlite_accordion Shortcode

  The Memberlite Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's memberlite_accordion shortcode in all versions up to, and including, 1.3.9 due to insufficient input sanitization and output escaping on user supplied…

  strangerstudios Memberlite Shortcodes Web / CMS
  Nov 23, 2024
• Medium 5.4
  CVE-2024-1407

  Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery to Membership Modification

  The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.12.10. This is due to missing or incorrect nonce validation on mul…

  strangerstudios Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions Web / CMS
  Jun 19, 2024
• Medium 5.3
  CVE-2024-3215

  Paid Memberships Pro <= 3.0.1 - Cross-Site Request Forgery

  The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on the p…

  strangerstudios Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions Web / CMS
  May 2, 2024
• Medium 4.3
  CVE-2024-0588 Public exploit

  Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery

  The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.12.10. This is due to missing nonce validation on the pmpro_lifter…

  strangerstudios Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions Web / CMS
  Apr 9, 2024
• Medium 5.3
  CVE-2024-0624 Public exploit

  Paid Memberships Pro <= 2.12.7 - Cross-Site Request Forgery to Level Orders Update

  The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.12.7. This is due to missing or incorrect nonce validation on the …

  strangerstudios Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions Web / CMS
  Jan 25, 2024
• Medium 5.3
  CVE-2023-6855

  Paid Memberships Pro <= 2.12.5 - Missing Authorization via API

  The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to unauthorized modification of membership levels created by the plugin due to an incorrectly implemented capability check in the pmpro_…

  strangerstudios Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions Web / CMS
  Jan 11, 2024
• Medium 4.3
  CVE-2020-36754

  Paid Memberships Pro <= 2.4.2 - Cross-Site Request Forgery Bypass

  The Paid Memberships Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.2. This is due to missing or incorrect nonce validation on the pmpro_page_save() function. This makes it possible for unauthenticat…

  strangerstudios Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions Web / CMS
  Oct 20, 2023