CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-25114

The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discount_code in one of its REST route (available to unauthenticated users) before using it in a SQL statement, leading to a SQL injection

Exploit prediction scoring system (EPSS) score

EPSS Score 0.665

EPSS Ranking 98.4%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2021-25114

Strangerstudios » Paid Memberships Pro » Version: 2.4

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.4
Strangerstudios » Paid Memberships Pro » Version: 2.4.1

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.4.1
Strangerstudios » Paid Memberships Pro » Version: 2.4.3

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.4.3
Strangerstudios » Paid Memberships Pro » Version: 2.4.4

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.4.4
Strangerstudios » Paid Memberships Pro » Version: 2.5

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.5
Strangerstudios » Paid Memberships Pro » Version: 2.5.1

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.5.1
Strangerstudios » Paid Memberships Pro » Version: 2.5.10

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.5.10
Strangerstudios » Paid Memberships Pro » Version: 2.5.10.1

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.5.10.1
Strangerstudios » Paid Memberships Pro » Version: 2.5.10.2

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.5.10.2
Strangerstudios » Paid Memberships Pro » Version: 2.5.2

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.5.2
Strangerstudios » Paid Memberships Pro » Version: 2.5.3

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.5.3
Strangerstudios » Paid Memberships Pro » Version: 2.5.4

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.5.4
Strangerstudios » Paid Memberships Pro » Version: 2.5.5

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.5.5
Strangerstudios » Paid Memberships Pro » Version: 2.5.6

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.5.6
Strangerstudios » Paid Memberships Pro » Version: 2.5.7

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.5.7
Strangerstudios » Paid Memberships Pro » Version: 2.5.8

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.5.8
Strangerstudios » Paid Memberships Pro » Version: 2.5.9

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.5.9
Strangerstudios » Paid Memberships Pro » Version: 2.5.9.1

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.5.9.1
Strangerstudios » Paid Memberships Pro » Version: 2.6

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.6
Strangerstudios » Paid Memberships Pro » Version: 2.6.1

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.6.1
Strangerstudios » Paid Memberships Pro » Version: 2.6.1.1

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.6.1.1
Strangerstudios » Paid Memberships Pro » Version: 2.6.2

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.6.2
Strangerstudios » Paid Memberships Pro » Version: 2.6.3

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.6.3
Strangerstudios » Paid Memberships Pro » Version: 2.6.4

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.6.4
Strangerstudios » Paid Memberships Pro » Version: 2.6.5

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.6.5
Strangerstudios » Paid Memberships Pro » Version: 2.6.6

cpe:2.3:a:strangerstudios:paid_memberships_pro:2.6.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-25114

Products

Pricing

Contact Us