| Package | Affected versions | Patched versions |
|---|---|---|
| paid memberships pro | < 2.9.12 | 2.9.12 |
The Paid Memberships Pro WordPress plugin before 2.9.12 does not prevent subscribers from rendering shortcodes that concatenate attributes directly into an SQL query.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free