Description (CNA)
SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Stranger Studios / Paid Memberships Pro | affected versions prior to 2.5.6 |
CWE
No CWE identifiers supplied.
References
- https://www.paidmembershipspro.com/pmpro-update-2-5-6/
- https://wordpress.org/plugins/paid-memberships-pro/
- https://jvn.jp/en/jp/JVN08191557/index.html
ADP enrichment
No English description supplied.