Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-119523 EUVD-2026-119095GHSA-gg46-46h7-wpw8

WordPress Paid Member Subscriptions plugin <= 3.1.3 - Broken Access Control vulnerability

Published Nov 7, 2026 · Updated Nov 7, 2026 · Assigned by Patchstack

Vendor: Cozmoslabs Product: Paid Member Subscriptions

Description

Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Member Subscriptions: from n/a through 3.1.3.

Affected products

VendorProductAffectedFixed
Cozmoslabs Paid Member Subscriptions ≤ 3.1.3 —

References