Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-112842 EUVD-2026-108138GHSA-v7m5-rm64-m85p

WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerability

Published Oct 22, 2026 · Updated Oct 22, 2026 · Assigned by Patchstack

Vendor: Cozmoslabs Product: Paid Member Subscriptions

Description

Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Member Subscriptions: from n/a through 3.1.2.

Affected products

VendorProductAffectedFixed
Cozmoslabs Paid Member Subscriptions ≤ 3.1.2 —

References