CVE-2020-5579: Strangerstudios Paid Memberships Pro

High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors.

Affected products

• Strangerstudios Paid Memberships Pro: before 2.3.3 (fixed in 2.3.3)

Published 2020-05-20. Last modified 2026-06-17.