CVE-2026-112842Medium· 6.5▾ SunlitMissing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Member Subscriptions: from n/a through …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Member Subscriptions: from n/a through 3.1.2.
paid-member-subscriptions <= 3.1.2Update the WordPress Paid Member Subscriptions plugin to the latest available version (at least 3.1.3).
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-105317High· 8.5Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions.
CVE-2026-97249Medium· 5.3Unauthenticated Bypass Vulnerability in Paid Member Subscriptions <= 3.0.9 versions.
CVE-2026-112242High· 8.8WordPress Profile Builder plugin <= 4.0.4 - Privilege Escalation vulnerability
CVE-2026-107768High· 7.2TranslatePress <= 3.3.7 - Unauthenticated Stored Cross-Site Scripting via Comment Anchor href with trp-gettext/TRPLINKPROCESSED Markers
CVE-2026-107748Medium· 6.4User Profile Builder <= 4.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter
CVE-2026-109447High· 8.1User Profile Builder <= 4.0.3 - Unauthenticated Privilege Escalation to 'role' Parameter via Legacy Meta-Name Collision on [wppb-register]