High · 7.2 CVE-2026-57348 EUVD-2026-41347GHSA-7w66-jfcx-mxqh

WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability

Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by Patchstack

Vendor: Cozmoslabs Product: Paid Member Subscriptions

Description

Unauthenticated Server Side Request Forgery (SSRF) in Paid Member Subscriptions <= 3.0.4 versions.

Affected products

Vendor	Product	Affected	Fixed
Cozmoslabs	Paid Member Subscriptions	≤ 3.0.4	—

References

https://patchstack.com/database/wordpress/plugin/paid-member-subscriptions/vulnerability/wordpress-paid-member-subscriptions-plugin-3-0-4-server-side-request-forgery-ssrf-vulnerability?_s_id=cve vdb-entry