Beveiligingsadvies

CVE-2026-14847

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-31 06:00:07

Laatst bijgewerkt 2026-07-31 13:26:50

Toegewezen door WPScan

CVSS-score 4.3

Status PUBLISHED

Beschrijving

The Paid Membership Subscriptions WordPress plugin before 3.0.7 does not perform capability or nonce checks on one of its payment-related AJAX actions, allowing any authenticated user with Subscriber-level access and above to disclose the payment details of any member by enumerating the payment identifier.

← Alle CVE's bekijken Bekijk op cve.org ↗