← WordPress Vulnerabilities
WordPress security by component

Paid Memberships Pro - Add Member From Admin

Paid Memberships Pro - Add Member From Admin is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 26, 2026; the highest CVE/CNA score is 8.8.

Plugin slug: pmpro-add-member-admin

CVE-2026-57659: Paid Memberships Pro - Add Member From Admin: Cross-site request forgery

Paid Memberships Pro - Add Member From Admin is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The published affected range is n/a through 0.7.2.

PublishedJun 26, 2026
Known safe version0.7.3
Safe version
Jun 26, 2026 CVE-2026-57659
Paid Memberships Pro - Add Member From Admin: Cross-site request forgery
Paid Memberships Pro - Add Member From Admin is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The published affected range is n/a through 0.7.2.
0.7.3
CVE8.8
NVDPending