CVE-2023-6855

The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to unauthorized modification of membership levels created by the plugin due to an incorrectly implemented capability check in the pmpro_rest_api_get_permissions_check function in all versions up to 2.12.5 (inclusive). This makes it possible for unauthenticated attackers to change membership levels including prices.

• CWE-862
• CWE-862
• CWE-862

• https://plugins.trac.wordpress.org/browser/paid-memberships-pro/trunk/includes/rest-api.php#L528Issue Tracking
• https://plugins.trac.wordpress.org/browser/paid-memberships-pro/trunk/includes/rest-api.php#L997Issue Tracking
• https://plugins.trac.wordpress.org/changeset/3011575/paid-memberships-pro/trunk/includes/rest-api.php?contextall=1&old=2947813&old_path=%2Fpaid-memberships-pro%2Ftrunk%2Fincludes%2Frest-api.phpIssue Tracking
• https://www.wordfence.com/threat-intel/vulnerabilities/id/383c7837-e7b7-4608-9cdc-91b7dbc7f4e2?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/browser/paid-memberships-pro/trunk/includes/rest-api.php#L528Issue Tracking
• https://plugins.trac.wordpress.org/browser/paid-memberships-pro/trunk/includes/rest-api.php#L997Issue Tracking
• https://plugins.trac.wordpress.org/changeset/3011575/paid-memberships-pro/trunk/includes/rest-api.php?contextall=1&old=2947813&old_path=%2Fpaid-memberships-pro%2Ftrunk%2Fincludes%2Frest-api.phpIssue Tracking
• https://www.wordfence.com/threat-intel/vulnerabilities/id/383c7837-e7b7-4608-9cdc-91b7dbc7f4e2?source=cveThird Party Advisory

Published

Jan 11, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6849A vulnerability was found in kalcaddle kodbox up to 1.48. It…9.8
• CVE-2023-6850A vulnerability was found in kalcaddle KodExplorer up to 4.5…9.8
• CVE-2023-6851A vulnerability was found in kalcaddle KodExplorer up to 4.5…9.8
• CVE-2023-6852A vulnerability classified as critical has been found in kal…9.8
• CVE-2023-6853A vulnerability classified as critical was found in kalcaddl…9.8
• CVE-2023-6854The Breakdance plugin for WordPress is vulnerable to Stored …6.4
• CVE-2023-6856The WebGL `DrawElementsInstanced` method was susceptible to …8.8
• CVE-2023-6857When resolving a symlink, a race may occur where the buffer …5.3
• CVE-2023-6858Firefox was susceptible to a heap buffer overflow in `nsText…8.8
• CVE-2023-6859A use-after-free condition affected TLS socket creation when…8.8
• CVE-2023-6860The `VideoBridge` allowed any content process to use texture…6.5
• CVE-2023-6861The `nsWindow::PickerOpen(void)` method was susceptible to a…8.8