Unauthenticated Checkout Deletion in Paid Memberships Pro

Executive Summary

This vulnerability affects the Paid Membership Subscriptions WordPress plugin before version 3.1.0. It involves an unauthenticated payment action that does not properly bind to the requesting user. An attacker can use another member's in-flight payment identifier to delete that member's checkout state.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your Paid Membership Subscriptions WordPress plugin is running a version prior to 3.1.0. You can do this by inspecting the plugin version in your WordPress admin panel or via command line using: wp plugin list --name='paid-membership-subscriptions' for WP-CLI users.

Useful 0 Not Useful 0

Impact Analysis

An attacker could disrupt another user's payment process by deleting their checkout state, potentially causing loss of paid subscriptions or memberships. This could lead to financial or access issues for affected users.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could potentially impact compliance with GDPR or HIPAA if it involves unauthorized access to or deletion of user payment or personal data during checkout. Unauthorized deletion of checkout state may lead to data integrity issues, which could violate GDPR's data accuracy principle or HIPAA's integrity requirements.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Paid Membership Subscriptions WordPress plugin to version 3.1.0 or later to address the vulnerability.

Useful 0 Not Useful 0