Cozmoslabs
Cozmoslabs Paid Membership Subscriptions: vulnerabilidades y CVE
Cozmoslabs Paid Membership Subscriptions tiene 6 vulnerabilidades publicadas, 5 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses5
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-90950 | Media (5.3) | 0.21% | — | 23 sept 2026 | The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not verify the reCAPTCHA on its registration handler when a form field is absent from the request, allowing unauthenticated users to create accounts… |
| CVE-2026-14848 | Media (5.4) | 0.29% | — | 4 ago 2026 | The Paid Membership Subscriptions WordPress plugin before 3.0.8 does not verify that the subscription being modified through its change-subscription checkout belongs to the current user, allowing any authenticated user… |
| CVE-2026-14849 | Baja (3.7) | 0.28% | — | 31 jul 2026 | The Paid Membership Subscriptions WordPress plugin before 3.0.7 does not protect the member and payment export files it writes to a predictable location in the uploads directory, allowing unauthenticated users to… |
| CVE-2026-14847 | Media (4.3) | 0.27% | — | 31 jul 2026 | The Paid Membership Subscriptions WordPress plugin before 3.0.7 does not perform capability or nonce checks on one of its payment-related AJAX actions, allowing any authenticated user with Subscriber-level access and… |
| CVE-2025-11835 | Media (5.3) | 0.23% | — | 5 nov 2025 | The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability and validation… |
| CVE-2023-51522 | Alta (8.8) | 0.23% | — | 15 mar 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Paid Member Subscriptions.This issue affects Paid Member Subscriptions: from n/a through 2.10.4. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Cozmoslabs
Profile Builder · 28Translatepress · 14Membership & Content Restriction - Paid Member Subscriptions · 7Paid Member Subscriptions · 6User Profile Picture · 4Client Portal · 2User Profile Builder · 2WP Webhooks · 2Translatepress-multilingual · 1Custom Post Types AND Custom Fields Creator · 1Profile Builder PRO · 1Passwordless Login · 1