CVE-2023-6187

CWE-434 — Unrestricted File Upload4 documents4 sources
Severity
8.8HIGH
EPSS
19.7%
top 4.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Strangerstudios Paid Memberships PRO
Timeline
PublishedNov 18
Latest updateApr 11

Description

The Paid Memberships Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'pmpro_paypalexpress_session_vars_for_user_fields' function in versions up to, and including, 2.12.3. This makes it possible for authenticated attackers with subscriber privileges or above, to upload arbitrary files on the affected site's server which may make remote code execution possible. This can be exploited if 2Checkout (deprecated since version 2.6) or PayP…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9

Affected Packages1 packages

Patches

Patch: plugins.trac.wordpress.org ↗Patch: plugins.trac.wordpress.org ↗Patch: www.wordfence.com ↗

🔴Vulnerability Details

3
VulDB
Paid Memberships Pro Plugin up to 2.12.3 on WordPress unrestricted upload (ID 2997319)↗2026-04-11
▶
CVEList
Paid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File Upload↗2023-11-18
▶
GHSA
GHSA-wwhh-cm65-x8qq: The Paid Memberships Pro plugin for WordPress is vulnerable to arbitrary file uploads to insufficient file type validation in the 'pmpro_paypalexpress↗2023-11-18
▶
CVE-2023-6187 (HIGH CVSS 8.8) | The Paid Memberships Pro plugin for | cvebase.io