CVE-2026-90950

MediumCVSS 5.3

Published: 23/09/2026(UTC)Updated: 23/09/2026(UTC)Translated: 23/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

9th percentile - higher than 9% of all known CVEs

Summary

The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not verify the reCAPTCHA on its registration handler when a form field is absent from the request, allowing unauthenticated users to create accounts without solving the reCAPTCHA the site has enabled.

Risk Assessment

Attackers can mass-create fake accounts, potentially leading to abuse, spam, or system overload.

Recommendation

Update the Paid Membership Subscriptions plugin to version 3.1.0 or later, which includes the fix.

Other vulnerabilities in Paid Membership Subscriptions

CVE-2025-11835Medium
The Paid Membership Subscriptions plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability and validation check in the PMS_AJAX_Checkout_Handler::process_payment() function in all versions up to and including 2.16.4. An unauthenticated attacker can trigger stored auto-renew charges for arbitrary members.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS