Paid Memberships Pro
Paid Memberships Pro is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jul 28, 2026; the highest CVE/CNA score is 6.4.
memberships-pro-content-restriction-user-registration-paid-subscriptionsCVE-2026-15016: Paid Memberships Pro subscribers can store script in readonly profile fields
Paid Memberships Pro through 3.8.1 accepts user-field values submitted through a page containing [pmpro_member_profile_edit], including fields configured as readonly, and later outputs readonly values without escaping them. A Subscriber can submit script-bearing content under the site-specific readonly field name; the value is stored in the profile and executes when that field is displayed. The exact request endpoint and parameter name depend on the site's shortcode page and custom-field configuration. Version 3.8.2 restores field sanitization, prevents readonly fields from being saved from user requests, and escapes their displayed values.
| Safe version |
|
||
|---|---|---|---|
| Jul 28, 2026 |
CVE-2026-15016
Paid Memberships Pro subscribers can store script in readonly profile fields
Paid Memberships Pro through 3.8.1 accepts user-field values submitted through a page containing [pmpro_member_profile_edit], including fields configured as readonly, and later outputs readonly values without escaping them. A Subscriber can submit script-bearing content under the site-specific readonly field name; the value is stored in the profile and executes when that field is displayed. The exact request endpoint and parameter name depend on the site's shortcode page and custom-field configuration. Version 3.8.2 restores field sanitization, prevents readonly fields from being saved from user requests, and escapes their displayed values.
|
3.8.2 |
CVE6.4
NVDPending
|