- Description
- The The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.13.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
- Source
- security@wordfence.com
- NVD status
- Analyzed
- Products
- membership_\&_content_restriction_-_paid_member_subscriptions
CVSS 3.1
- Type
- Secondary
- Base score
- 7.3
- Impact score
- 3.4
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Severity
- HIGH
- security@wordfence.com
- CWE-94
- Hype score
- Not currently trending
🚨 CVE-2024-10261 (Published: 2024-11-09) affects Paid Member Subscriptions plugin. Exploited versions include the latest release. To safeguard your site, update to the patched version immediately. Stay secure! 🔒 More info: https://t.co/RyDtyuEgq0 #WordPress #Security
@transilienceai
11 Nov 2024
17 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 CVE-2024-10261 (Published: 2024-11-09) affects Paid Member Subscriptions. This high-severity vulnerability impacts versions prior to the latest update. Users are urged to upgrade to the patched version immediately to mitigate risks. Stay secure! 🔒 More info:… https://t.co/mRv
@transilienceai
11 Nov 2024
2 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cozmoslabs:membership_\\&_content_restriction_-_paid_member_subscriptions:*:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "6D5F843B-53A9-4A5E-9EDF-90D28DB72317",
"versionEndExcluding": "2.13.1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]