Skip to content
OpenAdvisories
High · 7.5 CVE-2025-49870 EUVD-2025-19991GHSA-w876-cjcc-6733

WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability

Published Jul 4, 2025 · Updated May 12, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows SQL Injection.This issue affects Paid Member Subscriptions: from n/a through <= 2.15.1.

Affected products

VendorProductAffectedFixed
Cozmoslabs Paid Member Subscriptions ≤ 2.15.1 —

References