CVE-2026-14847CWE-639

CVE-2026-14847

Medium · published July 31, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
18.2
In the wild
Unconfirmed
What it is

The Paid Membership Subscriptions WordPress plugin before 3.0.7 does not perform capability or nonce checks on one of its payment-related AJAX actions, allowing any authenticated user with Subscriber-level access and above to disclose the payment details of any member by enumerating the payment identifier.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00270 · 18.2th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-07-31T11:16Z
References (1)
https://wpscan.com/vulnerability/5cd6d414-8d7d-4627-9649-af092a1afb75/ · [email protected]
EPSS history
Timeline
  • 31 JUL 06:00Z
    Paid Member Subscriptions < 3.0.7 - Subscriber+ Payment Data Disclosure via IDOR
    cvelistv5