high8.8
CVE-2023-0631
The Paid Memberships Pro WordPress plugin before 2.9.12 does not prevent subscribers from rendering shortcodes that concatenate attributes directly into an SQL…
Impact
The Paid Memberships Pro WordPress plugin before 2.9.12 does not prevent subscribers from rendering shortcodes that concatenate attributes directly into an SQL query.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Strangerstudios | Paid Memberships Pro | before 2.9.12 |