PatchTheCVE: membership \& content restriction - paid member subscriptionshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-12919: The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin fohttps://patchthecve.com/cve/CVE-2024-12919.htmlhttps://patchthecve.com/cve/CVE-2024-12919.htmlWed, 17 Jun 2026 07:00:45 +0000CRITICAL 9.8: The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.13.7. This is due to the pms_pb_payment_redirect_link function using the user-controlled value suppCVE-2024-11291: The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin fohttps://patchthecve.com/cve/CVE-2024-11291.htmlhttps://patchthecve.com/cve/CVE-2024-11291.htmlWed, 17 Jun 2026 06:57:28 +0000MEDIUM 5.3: The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.13.4 via the WordPress core search feature. This makes it possible for unauthenticated attCVE-2024-10261: The The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugihttps://patchthecve.com/cve/CVE-2024-10261.htmlhttps://patchthecve.com/cve/CVE-2024-10261.htmlWed, 17 Jun 2026 06:55:15 +0000HIGH 7.3: The The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.13.0. This is due to the software allowing users to execute an action that does not pro