Unrated severityNVD Advisory· Published Jan 20, 2023· Updated Apr 3, 2025

CVE-2023-23488

Description

The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Paid Membershipcpe-rescue
Package: https://wordpress.org/plugins/paid-membership
WordPress/Paid Memberships Prollm-fuzzy
Range: <2.9.8

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/171661/WordPress-Paid-Memberships-Pro-2.9.8-SQL-Injection.htmlmitre
www.tenable.com/security/research/tra-2023-2mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.074
exploit	0.030
kev	0.000
patch	-0.070
ransomware	0.000