Known vulnerabilities in Cozmoslabs Paid Member Subscriptions
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-119521 | WordPress Paid Member Subscriptions plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability | 6.5 Medium | Nov 3, 2026 |
| CVE-2026-112842 | Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows… | 6.5 Medium | Oct 22, 2026 |
| CVE-2026-105317 | Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions | 8.5 High | Oct 6, 2026 |
| CVE-2026-97249 | Unauthenticated Bypass Vulnerability in Paid Member Subscriptions <= 3.0.9 versions | 5.3 Medium | Sep 30, 2026 |
| CVE-2026-59539 | Subscriber Insecure Direct Object References (IDOR) in Paid Member Subscriptions <= 3.0.7 versions | 7.5 High | Jul 27, 2026 |
| CVE-2026-57348 | Unauthenticated Server Side Request Forgery (SSRF) in Paid Member Subscriptions <= 3.0.4 versions | 7.2 High | Jul 2, 2026 |
| CVE-2026-39514 | Unauthenticated Cross Site Scripting (XSS) in Paid Member Subscriptions <= 2.17.3 versions | 7.1 High | Jun 15, 2026 |
| CVE-2025-68514 | Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs Paid Member Subscriptions… | 6.5 Medium | Feb 20, 2026 |
| CVE-2025-58600 | Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows… | 5.3 Medium | Sep 3, 2025 |
| CVE-2025-54017 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… | 7.5 High | Aug 20, 2025 |
| CVE-2025-49870 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozmoslabs Paid… | 7.5 High | Jul 4, 2025 |
| CVE-2025-31088 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Paid… | 6.5 Medium | Mar 28, 2025 |
| CVE-2024-32728 | Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Paid Member Subscriptions.This issue affects Paid Member… | 4.3 Medium | Apr 24, 2024 |
| CVE-2023-51522 | Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Paid Member Subscriptions.This issue affects Paid Member… | 4.3 Medium | Mar 15, 2024 |
Other Cozmoslabs products
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor 21
Profile Builder 8
TranslatePress – Translate Multilingual sites with AI Translation 8
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction 7
Profile Builder Pro 6
TranslatePress 5
profile_builder 3
paid_member_subscriptions 2
User Profile Picture 2
WP Webhooks 2
Profile Builder Plugin 1
Profile Builder – User Profile & User Registration Forms 1