CVE-2025-49870 Information

Jul 05, 2025 cve

Description

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Cozmoslabs Paid Member Subscriptions allows SQL Injection. This issue affects Paid Member Subscriptions: from n/a through 2.15.1.

Reference

https://patchstack.com/database/wordpress/plugin/paid-member-subscriptions/vulnerability/wordpress-paid-member-subscriptions-2-15-1-sql-injection-vulnerability?_s_id=cve

CNNVD-202507-367 (Published: 2025-07-04)

Share on: