Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-31088 EUVD-2025-8569GHSA-mp37-h9r8-562g

WordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) Vulnerability

Published Mar 28, 2025 · Updated May 11, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Stored XSS.This issue affects Paid Member Subscriptions: from n/a through <= 2.14.3.

Affected products

VendorProductAffectedFixed
Cozmoslabs Paid Member Subscriptions ≤ 2.14.3 —

References