CVE-2025-11835 | Paid Membership Subscriptions Plugin up to 2.16.4 on WordPress process_payment authorization

A vulnerability, which was classified as critical, was found in Paid Membership Subscriptions Plugin up to 2.16.4 on WordPress. The affected element is the function PMS_AJAX_Checkout_Handler::process_payment. Such manipulation leads to missing authorization.

This vulnerability is uniquely identified as CVE-2025-11835. The attack can be launched remotely. No exploit exists.