Most recent entries from all

EUVD-2026-21702

fkie_cve-2021-20678

SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

GHSA-5hfp-hw26-8838

SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

gsd-2021-20678

jvndb-2021-000025

WordPress Plugin "Paid Memberships Pro" contains an SQL injection vulnerability (CWE-89). Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to the developer and coordinated on his own. After coordination was completed, this case was reported to JPCERT/CC, and JPCERT/CC coordinated with the developer for the publication.