CVE-2026-105317

A SQL injection vulnerability exists in the Paid Member Subscriptions plugin for versions up to 3.1.1, allowing attackers to manipulate database queries and potentially gain unauthorized access to sensitive data. This high-severity flaw poses a significant risk to any site utilizing the affected plugin, making it crucial for administrators and security teams to prioritize immediate patching or mitigation efforts.