high8.8
CVE-2021-20678
SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SQL commands via uns…
Impact
SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Strangerstudios | Paid Memberships Pro | before 2.5.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://jvn.jp/en/jp/JVN08191557/index.html
- https://wordpress.org/plugins/paid-memberships-pro/
- https://www.paidmembershipspro.com/pmpro-update-2-5-6/
- https://jvn.jp/en/jp/JVN08191557/index.html
- https://wordpress.org/plugins/paid-memberships-pro/
- https://www.paidmembershipspro.com/pmpro-update-2-5-6/