The Subscriptions & Memberships for PayPal plugin for WordPress is vulnerable to fake payment creation in all versions up to, and including, 1.1.7. This is due to the plugin not properly verifying the authenticity of an IPN request. This makes it possible for unauthenticated attackers to create fake payment entries that have not actually occurred.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Subscriptions Memberships For Paypal Plugin | — | Update subscriptions-memberships-for-paypal plugin to version 1.1.8, or a newer patched version | Nov 28, 2025 | Nov 21, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub