{"id":"CVE-2020-36754","details":"The Paid Memberships Pro  plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.2. This is due to missing or incorrect nonce validation on the pmpro_page_save() function. This makes it possible for unauthenticated attackers to save pages via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.","modified":"2026-08-07T15:13:55.645626Z","published":"2023-10-20T08:15:11.250Z","references":[{"type":"ADVISORY","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d74553a4-0ef7-4908-a2e8-5e0216f7b256?source=cve"},{"type":"FIX","url":"https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2368689%40paid-memberships-pro&new=2368689%40paid-memberships-pro&sfp_email=&sfph_mail="},{"type":"ARTICLE","url":"https://blog.nintechnet.com/more-wordpress-plugins-and-themes-vulnerable-to-csrf-attacks/"},{"type":"ARTICLE","url":"https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-1/"},{"type":"ARTICLE","url":"https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-2/"},{"type":"ARTICLE","url":"https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-3/"},{"type":"ARTICLE","url":"https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-4/"},{"type":"ARTICLE","url":"https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-5/"},{"type":"EVIDENCE","url":"https://blog.nintechnet.com/25-wordpress-plugins-vulnerable-to-csrf-attacks/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/strangerstudios/paid-memberships-pro","events":[{"introduced":"0"},{"last_affected":"2cd93b14a0b5d6249576fb3fd8ec3c3ca6932f08"}],"database_specific":{"cpe":"cpe:2.3:a:strangerstudios:paid_memberships_pro:*:*:*:*:*:wordpress:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"2.4.2"}],"source":"CPE_RANGE"}}],"versions":["v2.0.5","v2.4.2","v2.4.1","v2.4","v2.3.4","v2.3.3","v2.2.6","v2.2.5","v2.2.3","v2.2.4","v2.2.2","v2.2","v2.0.7","v2.0.4","v2.0.3","v2.0.2","v2.0.1","v2.0","release-1.9.4.4","release-1.9.4.2","release-1.9.4.3","release-1.9.4.1","release-1.9.4","archive/v1.9.4","release-1.9.3","release-1.9.2.1","release-1.9.2","release-1.9.1","release-1.9","release-1.8.13.6","release-1.8.13.5","release-1.8.13.4","release-1.8.13.3","release-1.8.13.2","release-1.8.13.1","release-1.8.13","release-1.8.12.1","release-1.8.12","release-1.8.11.2","release-1.8.11.1","release-1.8.11","release-1.8.10.4","release-1.8.10.3","release-1.8.10.2","release-1.8.10.1","release-1.8.9.1","release-1.8.9","release-1.8.8.3","release-1.8.8.1","release-1.8.8","release-1.8.7.3","release-1.8.7","release-1.8.6.8","release-1.8.6.7","release-1.8.6.6","release-1.8.4.5","release-1.8.4.3","release-1.8.4.2","release-1.8.4","release-1.8.3","release-1.8.2.2","release-v1.8.2.1","release-1.8.2","release-1.8.1","release-1.8","v1.7.5"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-36754.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"}]}