CVE-2023-0631 | BDVDB-2026-197721 Detail

Paid Memberships Pro

Description#

The Paid Memberships Pro WordPress plugin before 2.9.12 does not prevent subscribers from rendering shortcodes that concatenate attributes directly into an SQL query.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

References#

https://wpscan.com/vulnerability/19ef92fd-b493-4488-91f0-e6ba51362f79

Exploit#

https://wpscan.com/vulnerability/19ef92fd-b493-4488-91f0-e6ba51362f79

History#

Version 12023-03-20Record published in the CVE List.
Version 22025-02-26Most recent update recorded in the CVE List.