CVE-2026-112842: WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerability
Published Oct 22, 2026
·Updated
Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Member Subscriptions: from n/a through 3.1.2.
Affected Software
1 affected component
Cozmoslabs Paid Member Subscriptions<=3.1.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/paid-member-subscriptionsto a version that resolves this vulnerability.Fixed in 3.1.3
Event History
Oct 22, 2026
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
RemedyDescriptionSeverityWeakness