Unknown Paid Membership Subscriptions

3 known vulnerabilities in Unknown Paid Membership Subscriptions, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-90950 CVSS 5.3 medium The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not verify the reCAPTCHA on its registration handler when a form…
  • CVE-2026-90951 CVSS 3.7 low The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not bind one of its unauthenticated payment actions to the requesting…
  • CVE-2026-90922 CVSS 5.3 medium The Paid Membership Subscriptions WordPress plugin before 3.0.9 does not verify that the amount and currency reported by the payment…