CVE-2023-0631

CVE-2023-0631 is a high-severity SQL injection vulnerability affecting the Paid Memberships Pro WordPress plugin prior to version 2.9.12. The flaw allows authenticated subscribers to inject malicious SQL queries by manipulating shortcode attributes. With a CVSS score of 8.8 (High), successful exploitation can lead to full compromise of confidentiality, integrity, and availability of the affected system. While the vulnerability has a high EPSS score and FAUCET Risk Score, there is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.