CVE-2023-0631

Publication date

2023-03-20 15:52:10

Family

WPScan

State

PUBLISHED

Description

The Paid Memberships Pro WordPress plugin before 2.9.12 does not prevent subscribers from rendering shortcodes that concatenate attributes directly into an SQL query.