CVE-2025-11835 – Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction

CVE ID : CVE-2025-11835

Published : Nov. 5, 2025, 4:15 a.m. | 43 minutes ago

Description : The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability and validation check on the PMS_AJAX_Checkout_Handler::process_payment() function in all versions up to, and including, 2.16.4. This makes it possible for unauthenticated attackers to trigger stored auto-renew charges for arbitrary members.

Severity: 5.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…