High · 8.5 CVE-2026-105317 EUVD-2026-93089GHSA-55j9-qfwr-cc3v

WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability

Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Patchstack

Vendor: Cozmoslabs Product: Paid Member Subscriptions

Description

Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions.

Affected products

Vendor	Product	Affected	Fixed
Cozmoslabs	Paid Member Subscriptions	≤ 3.1.1	—

References

https://patchstack.com/database/wordpress/plugin/paid-member-subscriptions/vulnerability/wordpress-paid-member-subscriptions-plugin-3-1-1-sql-injection-vulnerability?_s_id=cve vdb-entry