CVE-2023-0631 (published 2023-03-20T15:52:10.755Z)
The Paid Memberships Pro WordPress plugin before 2.9.12 does not prevent subscribers from rendering shortcodes that concatenate attributes directly into an SQL query.
Affected products: Vendor: Unknown
Product: Paid Memberships Pro
Versions: 1.5.5