CyberRota Analysis
AI-GeneratedThe Paid Membership Subscriptions plugin for WordPress prior to version 3.1.0 is vulnerable due to a lack of user authentication for a payment action, enabling an attacker with access to another member's in-flight payment identifier to delete that member's checkout state. This could lead to unauthorized modifications of payment processes, potentially disrupting user transactions. WordPress site administrators using this plugin should prioritize updating to version 3.1.0 or later to mitigate this risk.
Original NVD Description
The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not bind one of its unauthenticated payment actions to the requesting user, allowing someone who holds another member's in-flight payment identifier to delete that member's checkout state.