Veille CVE

Recherche « Cozmoslabs Paid Member Subscriptions »

6 CVE

  1. CVE-2026-112842 6.5 Moyenne

    Cozmoslabs Paid Member Subscriptions

    Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Member Subscriptions: from n/a through 3.1.2.

  2. CVE-2026-105317 8.5 Élevée

    Cozmoslabs Paid Member Subscriptions

    Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions.

  3. CVE-2026-97249 5.3 Moyenne

    Cozmoslabs Paid Member Subscriptions

    Unauthenticated Bypass Vulnerability in Paid Member Subscriptions <= 3.0.9 versions.

  4. CVE-2026-59539 7.5 Élevée

    Cozmoslabs Paid Member Subscriptions

    Subscriber Insecure Direct Object References (IDOR) in Paid Member Subscriptions <= 3.0.7 versions.

  5. CVE-2026-57348 7.2 Élevée

    Cozmoslabs Paid Member Subscriptions

    Unauthenticated Server Side Request Forgery (SSRF) in Paid Member Subscriptions <= 3.0.4 versions.

  6. CVE-2026-39514 7.1 Élevée

    Cozmoslabs Paid Member Subscriptions

    Unauthenticated Cross Site Scripting (XSS) in Paid Member Subscriptions <= 2.17.3 versions.