← Database

CVE-2023-0631

HIGH CVSS: 8.8 Published: 2023-03-20 Modified: 2026-06-17

Description

The Paid Memberships Pro WordPress plugin before 2.9.12 does not prevent subscribers from rendering shortcodes that concatenate attributes directly into an SQL query.

Affected Platforms

Strangerstudios Paid Memberships Pro

Weakness Type

CWE-89

References