Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-57348

WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability

Description

Unauthenticated Server Side Request Forgery (SSRF) in Paid Member Subscriptions <= 3.0.4 versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cozmoslabs Paid Member Subscriptions

Default version status: unaffected

  • n/a to ≤ 3.0.4affected

References