{"id":"CVE-2026-119523","kind":"vulnerability","aliases":["CVE-2026-119523"],"related":[],"title":"Paid Member Subscriptions WordPress plugin: missing authorization check through 3.1.3","description":"Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Member Subscriptions: from n/a through 3.1.3.","summary":"The Paid Member Subscriptions WordPress plugin by Cozmoslabs has a missing authorization check in versions through 3.1.3. The sources say it lets an attacker reach functionality that should be restricted by access control.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["package","paid-member-subscriptions","self-hosted","wordpress"],"not_affected_if":["plugin-not-installed"],"how_to_check":"- Check the installed version of the Paid Member Subscriptions plugin (`paid-member-subscriptions`) in the WordPress admin plugins list.\n- Compare it against the fixed version: unknown.","fix":null,"status":"open","published_at":"2026-11-07T11:16:59+00:00","first_seen_at":"2026-11-07T11:46:52+00:00","triaged_at":"2026-11-07T11:48:29+00:00","updated_at":"2026-11-07T11:48:29+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-11-07T11:48:29Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Paid Member Subscriptions WordPress plugin: missing authorization check through 3.1.3","impact":"medium","summary":"The Paid Member Subscriptions WordPress plugin by Cozmoslabs has a missing authorization check in versions through 3.1.3. The sources say it lets an attacker reach functionality that should be restricted by access control.","audience":"businesses","category":"package","nicknames":[],"who_cares":["wordpress","paid-member-subscriptions","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unknown access to restricted plugin functions on the site","analyst_note":"Find the fixed version and the specific vulnerable endpoint from the Wordfence or vendor advisory for CVE-2026-119523.","how_to_check":"- Check the installed version of the Paid Member Subscriptions plugin (`paid-member-subscriptions`) in the WordPress admin plugins list.\n- Compare it against the fixed version: unknown.","plain_action":"","needs_analyst":true,"not_affected_if":["plugin-not-installed"],"who_is_affected":"Sites running the Paid Member Subscriptions plugin at version 3.1.3 or earlier are in the affected range according to NVD. The sources do not say which functions are reachable or what settings are required, so whether a given site is exposed is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.00069,"input_tokens":4230,"output_tokens":534,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119523':13A,16A '-2026':12A,15A '3.1.3':10A,42B,87C 'access':57B,75C 'affect':80C 'allow':71C 'attack':49B 'author':7A,37B,60C 'check':8A,38B 'configur':74C 'control':58B,76C 'cozmoslab':33B,63C 'cve':11A,14A 'exploit':72C 'function':51B 'host':24B 'incorrect':73C 'issu':79C 'let':47B 'levels.this':78C 'member':2A,20B,28B,65C,69C,82C 'miss':6A,36B,59C 'n/a':85C 'packag':17B 'paid':1A,19B,27B,64C,68C,81C 'paid-member-subscript':18B,67C 'plugin':5A,31B 'reach':50B 'restrict':55B 'say':45B 'secur':77C 'self':23B 'self-host':22B 'sourc':44B 'subscript':3A,21B,29B,66C,70C,83C 'version':40B 'vulner':61C 'wordpress':4A,25B,30B","nicknames":[],"mitigations":[],"who_affected":"Sites running the Paid Member Subscriptions plugin at version 3.1.3 or earlier are in the affected range according to NVD. The sources do not say which functions are reachable or what settings are required, so whether a given site is exposed is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["medium","package","paidmembersubscriptions","selfhosted","wordpress"],"campaign_type":null,"search_a":"'-119523':13A,16A '-2026':12A,15A '3.1.3':10A 'author':7A 'check':8A 'cve':11A,14A 'member':2A 'miss':6A 'paid':1A 'plugin':5A 'subscript':3A 'wordpress':4A","search_b":"'3.1.3':42B 'access':57B 'attack':49B 'author':37B 'check':38B 'control':58B 'cozmoslab':33B 'function':51B 'host':24B 'let':47B 'member':20B,28B 'miss':36B 'packag':17B 'paid':19B,27B 'paid-member-subscript':18B 'plugin':31B 'reach':50B 'restrict':55B 'say':45B 'self':23B 'self-host':22B 'sourc':44B 'subscript':21B,29B 'version':40B 'wordpress':25B,30B","search_c":"'3.1.3':87C 'access':75C 'affect':80C 'allow':71C 'author':60C 'configur':74C 'control':76C 'cozmoslab':63C 'exploit':72C 'incorrect':73C 'issu':79C 'levels.this':78C 'member':65C,69C,82C 'miss':59C 'n/a':85C 'paid':64C,68C,81C 'paid-member-subscript':67C 'secur':77C 'subscript':66C,70C,83C 'vulner':61C","first_public_at":"2026-11-07T11:16:59+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119523","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119523","severity":null,"published_at":"2026-11-07T11:16:59+00:00","modified_at":"2026-11-07T11:16:59+00:00","first_seen_at":"2026-11-07T11:46:52+00:00","fetched_at":"2026-11-07T11:46:52+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}