Subscriptions & Memberships for PayPal

Subscriptions & Memberships for PayPal has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; all 4 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.1 out of 10. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (25%). Other recurring categories include Cross-Site Scripting, Insufficient Verification Of Data Authenticity.

Every one of the 4 issues recorded for Subscriptions & Memberships for PayPal has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Subscriptions & Memberships for PayPal is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all Subscriptions & Memberships for PayPal vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1

Subscriptions & Memberships for PayPal <= 1.1.5 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

4 records
Subscriptions & Memberships for PayPal banner
Latestv1.1.8

Subscriptions & Memberships for PayPal

Scott Paterson

Author

Scott Paterson

3.9(12)
78/100
Last Updated
2026-08-22 (22d ago)
Active Installs
900+
Downloads
39,555
Requires WP
3.5+
Requires PHP
5.4+
Tested up to
WP 7.1
Created
2016-08-19 (10y ago)

Overview This plugin will allow you to sell subscriptions and / or memberships with PayPal on your WordPress website. The plugin can be setup to sell only subscriptions, or it can be setup to sell memberships and limit content on your site. You can sell subscriptions in terms of a set number of days, months, or years. As well as have subscriptions continue forever. You can also offer your customers a trial price. This PayPal plugin works with any WordPress theme. WP Plugin is an offical PayPal Partner based in Boulder, Colorado. You can visit WP Plugins website at wpplugin.org. Various trademarks held by their respective owners. Subscriptions & Memberships for PayPalFeatures View payments received in your WordPress admin View subscribers in your WordPress admin Page / Post Button shortcode inserter Page / Post Button shortcode Login / Logout shortcode inserter Built in support 25 currencies Built in support 20 languages Offer a trial subscription Offer an optional free trail Each button can have its own language and currency PayPal testing with Sandbox mode Choose from 11 different PayPal Buy Now buttons Choose how the PayPal window opens Choose to automatically create a WordPress subscriber account for your members Subscriptions & Memberships for PayPal Pro We offer a Pro version of this plugin for business owners who need more features. Custom subscription levels Offer a second trial period Free membership registration Free membership level Add a price dropdown menu per button Add a text dropdown menu per button Add up to 2 input boxes per button Each button can have a separate PayPal account Each button can have a separate return URL Limit content by shortcode Link directly to buttons via URL and redirect to PayPal Button Widget Custom button image Further plugin development You can learn more about the Pro version here WP Plugin is an offical PayPal Partner. Various trademarks held by their respective owners.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C