Cozmoslabs Paid Member Subscriptions Authorization Bypass Vulnerability Allowing Insecure Direct Object References

An authorization bypass vulnerability has been identified in the Cozmoslabs Paid Member Subscriptions WordPress plugin, specifically in versions through 2.16.8. This vulnerability allows for exploitation of improperly configured access control security levels, leading to insecure direct object references (IDOR).

Impact

Exploitation of this vulnerability could bypass authorization and access control measures, potentially allowing unauthorized users to access sensitive information or perform actions on behalf of other users.

Remediation

Users of the Cozmoslabs Paid Member Subscriptions WordPress plugin should update to version 2.16.9 or later to address this vulnerability.