Scottpaterson Subscriptions & Memberships for PayPal vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Scottpaterson Subscriptions & Memberships for PayPal: 2 record(s), with affected versions and fixes.
CVE-2025-12752
Medium · 5.3
CWE-345 Nov 22, 2025
Subscriptions & Memberships for PayPal <= 1.1.7 - Unauthenticated Fake Payment Creation
The Subscriptions & Memberships for PayPal plugin for WordPress is vulnerable to fake payment creation in all versions up to, and including, 1.1.7. This is due to the plugin not properly verifying the authenticity of an IPN request. This makes it possible for unauthenticated attackers to create fake payment entries that have not actually occurred.
CVE-2025-66107
Medium · 5.3
CWE-862 Nov 21, 2025
WordPress Subscriptions & Memberships for PayPal plugin <= 1.1.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Scott Paterson Subscriptions & Memberships for PayPal subscriptions-memberships-for-paypal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscriptions & Memberships for PayPal: from n/a through <= 1.1.7.