CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability and validation check on the PMS_AJAX_Checkout_Handler::process_payment() function in all versions up to, and including, 2.16.4. This makes it possible for unauthenticated attackers to trigger stored auto-renew charges for arbitrary members.
Explanation of Vulnerability in Simple Terms
Paid Membership Subscriptions for WordPress lacks proper authorization checks, allowing unauthenticated attackers to modify data through the plugin's functionality. The vulnerability affects versions up to 2.16.4 and requires no special privileges or user interaction to exploit. Site administrators should update to a version newer than 2.16.4 to prevent unauthorized modifications.
What an attacker can do
Modify plugin data without authentication or authorization.
Potential impact on your site
Unauthorized users can alter membership settings, subscription data, or content restrictions without logging in.
Conditions required to exploit
Network access to the WordPress site; no authentication required.
Key dates
External resources
