Medium · 4.3 CVE-2024-32794 EUVD-2024-30580GHSA-4386-m5jw-9jgw

WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

Published Apr 24, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 2.12.10.

Vendor	Product	Affected	Fixed
Paid Memberships Pro	Paid Memberships Pro	≤ 2.12.10	—