Cozmoslabs Membership & Content Restriction - Paid Member Subscriptions

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

7CVEs

CVE-2024-12919

Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id

Published 2025-01-14 · Analyzed

9.8EPSS 0.006

CVE-2021-24728

Paid Member Subscriptions < 2.4.2 - Authenticated SQL Injection

Published 2021-09-13 · Modified

8.8EPSS 0.017

CVE-2024-10261

Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.0 - Unauthenticated Arbitrary Shortcode Execution

Published 2024-11-09 · Analyzed

7.3EPSS 0.005

CVE-2024-9222

Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.12.8 - Reflected Cross-Site Scripting

Published 2024-10-02 · Analyzed

6.1EPSS 0.004

CVE-2024-1389

Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return

Published 2024-02-20 · Modified

5.3EPSS 0.005

CVE-2024-11291

Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure

Published 2024-12-18 · Analyzed

5.3EPSS 0.005

CVE-2024-1390

Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via creating_pricing_table_page

Published 2024-02-20 · Modified

4.3EPSS 0.005

Cozmoslabs Membership & Content Restriction - Paid Member Subscriptions

Security check