CVE-2026-90951 — Paid Member Subscriptions < 3.1.0 - Unauthenticated In-Flight Checkout State Deletion via pms_process_payment

CVE-2026-90951

Paid Member Subscriptions < 3.1.0 - Unauthenticated In-Flight Checkout State Deletion via pms_process_payment PUBLISHED

Description (CNA)

The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not bind one of its unauthenticated payment actions to the requesting user, allowing someone who holds another member's in-flight payment identifier to delete that member's checkout state.

Affected (CNA)

Vendor / product	Versions
Unknown / Paid Membership Subscriptions	affected 0 before 3.1.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/bf740af6-3674-461e-83f0-22bd5c5b3378/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.