CVE-2026-105317

Summary

This flaw allows SQL injection attacks on subscriber data in versions of Paid Member Subscriptions up to 3.1.1, posing a high risk due to potential data compromise.

Exploitability

Exploitation is relatively straightforward given the SQL injection vulnerability, requiring only user input manipulation to execute arbitrary SQL commands.

Blast radius

If exploited, this could lead to unauthorized access to sensitive subscriber data, including personal information and subscription details.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Paid Member Subscriptions 3.1.2 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.