CVE-2026-57659

Name of the Vulnerable Software and Affected Versions Paid Memberships Pro - Add Member From Admin versions prior to 0.7.3

Description An unauthenticated Cross Site Request Forgery (CSRF) exists, which allows attackers to execute unauthorized actions via crafted requests. CSRF is a type of attack that tricks a victim into submitting a malicious request. It occurs when an application relies on browser-stored credentials to authenticate requests without verifying that the user intentionally initiated the action.

Recommendations Update to a version newer than 0.7.2.