Vulnerability history

Broken Access Control vulnerability

SQL Injection vulnerability

Bypass Vulnerability vulnerability

Unauthenticated reCAPTCHA Bypass vulnerability

Unauthenticated In-Flight Checkout State Deletion vulnerability

Unauthenticated Membership Payment Bypass vulnerability

Subscriber+ Payment Data Disclosure vulnerability

Unauthenticated Sensitive Information Exposure vulnerability

Insecure Direct Object References (IDOR) vulnerability

Server Side Request Forgery (SSRF) vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Insecure Direct Object References (IDOR) vulnerability

WordPress Paid Membership Subscriptions - Effortless Memberships, Recurring Payments & Content Restriction plugin <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return vulnerability

Missing Authorization to Unauthenticated Arbitrary Member Subscription Auto Renewal vulnerability

Broken Access Control Vulnerability

Local File Inclusion Vulnerability

SQL Injection Vulnerability

Cross Site Scripting (XSS) Vulnerability

Authentication Bypass via pms_payment_id vulnerability

Unauthenticated Content Restriction Bypass to Sensitive Information Exposure vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability

Reflected Cross-Site Scripting vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Missing Authorization via creating_pricing_table_page vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability