← CVE Intelligence

CVE-2023-0631

Paid Memberships Pro < 2.9.12 - Subscriber+ SQL Injection PUBLISHED

Description (CNA)

The Paid Memberships Pro WordPress plugin before 2.9.12 does not prevent subscribers from rendering shortcodes that concatenate attributes directly into an SQL query.

Affected (CNA)

Vendor / productVersions
Unknown / Paid Memberships Proaffected 1.5.5 before 2.9.12

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.