CVE-2026-90951 | Paid Membership Subscriptions Plugin up to 3.0.x on WordPress authorization

September 23, 2026 Yanac

A vulnerability classified as problematic was found in Paid Membership Subscriptions Plugin up to 3.0.x on WordPress. Impacted is an unknown function. Such manipulation leads to incorrect authorization.

This vulnerability is uniquely identified as CVE-2026-90951. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More