CVE-2026-14849 | Paid Membership Subscriptions Plugin up to 3.0.6 on WordPress file access

July 31, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Paid Membership Subscriptions Plugin up to 3.0.6 on WordPress. This affects an unknown function. Executing a manipulation can lead to files or directories accessible.

This vulnerability is registered as CVE-2026-14849. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More