Description (CNA)
SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Stranger Studios / Paid Memberships | affected versions prior to 2.3.3 |
CWE
No CWE identifiers supplied.
References
- https://www.paidmembershipspro.com/pmpro-update-2-3-3-security-release/
- https://jvn.jp/en/jp/JVN20248858/index.html
ADP enrichment
No English description supplied.