Security Advisory

CVE-2023-0631

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-03-20 15:52:10

Last updated 2025-02-26 14:44:50

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Paid Memberships Pro WordPress plugin before 2.9.12 does not prevent subscribers from rendering shortcodes that concatenate attributes directly into an SQL query.

← Browse all CVEs View on cve.org ↗