CyberRota Analysis
AI-GeneratedThe RealHomes Memberships plugin for WordPress prior to version 3.1.0 is vulnerable as it fails to verify the completion of membership payments and lacks nonce and capability checks, enabling any authenticated user, including Subscribers, to gain access to paid membership packages without proper payment. This could lead to unauthorized access to premium content and services, potentially impacting revenue for site owners. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The RealHomes Memberships WordPress plugin before 3.1.0 does not verify that a membership payment actually completed, nor check a nonce or the user's capability, before granting a paid membership package, allowing any authenticated user such as a Subscriber to obtain paid membership packages without paying.