Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions has 28 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2026; all 28 are fixed as of October 2026. Their average CVSS score is 6.3, and the most serious one scores 9.8 out of 10. Severity breakdown: 3 critical and 6 high. 2024 was the busiest year with 10 disclosures.

The most common weakness is Cross-Site Request Forgery, behind 6 of the records (21%). Other recurring categories include Improper Neutralization Of Input During Web Page Generation, Improper Neutralization Of Special Elements Used In An SQL Command.

Every one of the 28 issues recorded for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions has a vendor fix available, so running the current release closes all known holes.

21 independent researchers contributed these findings, most of them (3) reported by Scott Kingsley Clark.