← All advisories

High severity8.8NVD Advisory· Published Jun 26, 2026· Updated Jun 26, 2026

CVE-2026-57659

CVE-2026-57659

Description

Unauthenticated Cross Site Request Forgery (CSRF) in Paid Memberships Pro - Add Member From Admin <= 0.7.2 versions.

Affected products

1

WordPress/Paid Memberships Pro - Add Member From Adminllm-fuzzy
Range: <=0.7.2

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/pmpro-add-member-admin/vulnerability/wordpress-paid-memberships-pro-add-member-from-admin-plugin-0-7-2-cross-site-request-forgery-csrf-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.