WordPress plugin
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 31 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High5
- Medium25
- Low0
All Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.1 | Unauthenticated Local File Inclusion ≤2.15.4Update to 2.15.5 | CVE-2025-54017 | |
| High8.1 | Unauthenticated Local File Inclusion ≤2.15.4Update to 2.15.5 | — | |
| High7.5 | Unauthenticated SQL Injection ≤2.15.1Update to 2.15.2 | CVE-2025-49870 | |
| Critical9.8 | Authentication Bypass via pms_payment_id ≤2.13.7Update to 2.13.8 | CVE-2024-12919 | |
| High7.3 | Unauthenticated Arbitrary Shortcode Execution ≤2.13.0Update to 2.13.1 | CVE-2024-10261 | |
| High8.8 | SQL Injection ≤2.4.1Update to 2.4.2 | CVE-2021-24728 |
- High8.1Unauthenticated Local File Inclusion
≤2.15.4Update to 2.15.5
- High8.1Unauthenticated Local File Inclusion
≤2.15.4Update to 2.15.5
- High7.5Unauthenticated SQL Injection
≤2.15.1Update to 2.15.2
- Critical9.8Authentication Bypass via pms_payment_id
≤2.13.7Update to 2.13.8
- High7.3Unauthenticated Arbitrary Shortcode Execution
≤2.13.0Update to 2.13.1
- High8.8SQL Injection
≤2.4.1Update to 2.4.2
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction: common questions
Does Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction have known vulnerabilities?
Yes. VulnCrest Radar lists 31 known vulnerabilities in Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction: 1 critical, 5 high, 25 medium. None are known to affect version null.
How do I check which version of Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction vulnerability?
CVE-2026-119523, published Nov 7, 2026: Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 3.1.3 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction vulnerability listed in CISA KEV?
No. None of the known Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction vulnerabilities is currently listed in the CISA KEV catalog.