Skip to content
Sign in
4.8 Medium

CVE-2024-13119 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress…

Description

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin before 4.15.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

Affected products and versions

Product Affected versions Fixed in
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content 4.15 earliest → < 4.15.20 4.15.20

Other CVEs of Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content

The 7 CVEs of Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content →
CVE-2026-12497 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress… 7.5 High CVE-2026-10820 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress… 8.1 High CVE-2024-13120 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress… 4.8 Medium CVE-2024-13121 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress… 3.5 Low
Track this CVE