CVE-2026-90922

5.3 Moyenne

Publiée le 17/09/2026 à 08:16 · Modifiée le 18/09/2026 à 21:08 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Paid Membership Subscriptions WordPress plugin before 3.0.9 does not verify that the amount and currency reported by the payment provider match the pending payment before completing it, allowing unauthenticated users to obtain a paid membership by paying an arbitrary lower amount.

Traduire en français

Produits concernés

Unknown Paid Membership Subscriptions

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N`

Faiblesses (CWE)

CWE-284

Références

https://wpscan.com/vulnerability/a7f3882a-81d7-4915-b83c-10480eba493a/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories