Medium · 5.4 CVE-2024-32793 EUVD-2024-30579GHSA-9q4q-2xpr-pvwv

WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

Published Apr 24, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 2.12.10.

Vendor	Product	Affected	Fixed
Paid Memberships Pro	Paid Memberships Pro	≤ 2.12.10	—