Unscored CVE-2021-20678 EUVD-2021-8096GHSA-5hfp-hw26-8838

SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary …

Published Mar 18, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: Stranger Studios Product: Paid Memberships Pro

Description

SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Stranger Studios	Paid Memberships Pro	versions prior to 2.5.6	—

References

https://www.paidmembershipspro.com/pmpro-update-2-5-6/
https://wordpress.org/plugins/paid-memberships-pro/
https://jvn.jp/en/jp/JVN08191557/index.html