CVE-2026-59539

The vulnerability allows for insecure direct object references (IDOR) in Paid Member Subscriptions versions up to 3.0.7, potentially enabling unauthorized access to sensitive subscriber data. This high-severity flaw could lead to data exposure or manipulation, making it critical for organizations using affected versions to prioritize immediate remediation. Users and administrators of the subscription service should assess their systems for this vulnerability to mitigate potential risks.