Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-119521 EUVD-2026-116070GHSA-vrqc-4rp8-xrxq

WordPress Paid Member Subscriptions plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability

Published Nov 3, 2026 · Updated Nov 6, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Stored XSS.This issue affects Paid Member Subscriptions: from n/a through 3.1.3.

Affected products

VendorProductAffectedFixed
Cozmoslabs Paid Member Subscriptions ≤ 3.1.3 —

References