« Volver al listado

Paid Member Subscriptions

Paid Member Subscriptions: vulnerabilidades y CVE

Paid Member Subscriptions tiene 5 vulnerabilidades publicadas, 5 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.

CVE5
Últimos 12 meses5
Críticas0
Explotadas activamente0

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2026-105317Alta (8.5)0.28%—6 oct 2026
Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions.
CVE-2026-97249Media (5.3)0.20%—30 sept 2026
Unauthenticated Bypass Vulnerability in Paid Member Subscriptions <= 3.0.9 versions.
CVE-2026-59539Alta (7.5)0.35%—27 jul 2026
Subscriber Insecure Direct Object References (IDOR) in Paid Member Subscriptions <= 3.0.7 versions.
CVE-2026-57348Alta (7.2)0.27%—2 jul 2026
Unauthenticated Server Side Request Forgery (SSRF) in Paid Member Subscriptions <= 3.0.4 versions.
CVE-2026-39514Alta (7.1)0.25%—15 jun 2026
Unauthenticated Cross Site Scripting (XSS) in Paid Member Subscriptions <= 2.17.3 versions.

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1190 Exploit Public-Facing Application3
  2. T1005 Data from Local System1
  3. T1059.007 JavaScript1
  4. T1078.001 Default Accounts1
  5. T1090 Proxy1
  6. T1189 Drive-by Compromise1

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.