Vulnerabilities in Stranger Studios
4 resultsCVE-2021-20678—SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SEPSS 2.0%CVE-2020-5579—SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SEPSS 1.2%CVE-2023-28419MEDIUMWordPress Force First and Last Name as Display Name Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.4%CVE-2026-57659HIGHWordPress Paid Memberships Pro - Add Member From Admin plugin <= 0.7.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%