7.5
Élevée
CVE-2025-49870 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozmoslabs Paid…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows SQL Injection.This issue affects Paid Member Subscriptions: from n/a through <= 2.15.1.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Paid Member Subscriptions 2.15 | premières → 2.15.1 | Pas de correctif indiqué |
Autres CVE de Paid Member Subscriptions
Les 14 CVE de Paid Member Subscriptions →
CVE-2026-119521
WordPress Paid Member Subscriptions plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability
6.5
Moyenne
CVE-2026-112842
Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows…
6.5
Moyenne
CVE-2026-105317
Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions
8.5
Élevée
CVE-2026-97249
Unauthenticated Bypass Vulnerability in Paid Member Subscriptions <= 3.0.9 versions
5.3
Moyenne