CVE-2025-31088: WordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Stored XSS.This issue affects Paid Member Subscriptions: from n/a through <= 2.14.3.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31088?
CVE-2025-31088 has a high severity rating due to its potential to allow stored Cross-site Scripting (XSS) attacks.
How do I fix CVE-2025-31088?
To fix CVE-2025-31088, update the Paid Member Subscriptions plugin to version 2.14.4 or later.
What are the potential impacts of CVE-2025-31088?
The potential impacts of CVE-2025-31088 include unauthorized access to user data and the ability to inject malicious scripts.
Which versions of Paid Member Subscriptions are affected by CVE-2025-31088?
CVE-2025-31088 affects all versions of Paid Member Subscriptions from n/a to 2.14.3.
Is CVE-2025-31088 a known vulnerability in WordPress?
Yes, CVE-2025-31088 is a known vulnerability affecting the WordPress Paid Member Subscriptions plugin.