
- An improper neutralization flaw was found in the WordPress Paid Membership Subscriptions plugin
- This plugin is used by more than 10,000 sites, enabling memberships and paying user accounts
- A patch is now available, so users should update immediately
A high-severity vulnerability has been discovered in a popular premium WordPress plugin, allowing threat actors to access, or exfiltrate, sensitive data without authentication.