What the vulnerability does
01Description
The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.13.7. This is due to the pms_pb_payment_redirect_link function using the user-controlled value supplied via the 'pms_payment_id' parameter to authenticate users without any further identity validation. This makes it possible for unauthenticated attackers with knowledge of a valid payment ID to log in as any user who has made a purchase on the targeted site.
Explanation of Vulnerability in Simple Terms
02Summary
Paid Membership Subscriptions for WordPress contains an authentication bypass vulnerability affecting versions up to 2.13.7. An attacker can gain unauthorized access to the plugin without valid credentials, potentially compromising membership data, payment information, and restricted content. The vulnerability requires no user interaction and can be exploited remotely. Site administrators should update immediately to a patched version.
What an attacker can do
03Attacker Capabilities
Bypass authentication and gain unauthorized access to the plugin without valid credentials.
Potential impact on your site
04Site Impact
Attackers can access membership data, payment records, and restricted content without authorization.
Conditions required to exploit
05Prerequisites
Network access only; no authentication or user interaction required.
Key dates
06Disclosure timeline
January 14, 2025
CVE published
April 8, 2026
Record updated
