MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet

Information

Software Type Plugin
Software Slug paid-membership (view on wordpress.org)
Software Status Active
Software Author videowhisper
Software Website fanspaysite.com
Software Downloads 30,406
Software Active Installs 10
Software Record Last Updated August 11, 2026

5 Vulnerabilities

Submit a Vulnerability
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet <= 3.2.0 - Cross-Site Request Forgery to Settings Reset
4.3
CVE-2025-5937
Jun 27, 2025
Researcher: Nabil Irawan
MicroPayments <= 2.9.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-31075
Mar 28, 2025
Researcher: Muhammad Yudha - DJ
MicroPayments <= 3.2.4 - Reflected Cross-Site Scripting
6.1
CVE-2025-26579
Mar 12, 2025
Researcher: João Pedro Soares de Alcântara
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet <= 2.9.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-13391
Jan 17, 2025
Researcher: SOPROBRO
MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership <= 1.9.5 - Cross-Site Request Forgery
5.4
CVE-2022-27629
Apr 20, 2022
Researcher: Kosuke Sakai
Title Status CVE ID CVSS Researchers Date
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet <= 3.2.0 - Cross-Site Request Forgery to Settings Reset Patched CVE-2025-5937 4.3 Nabil Irawan June 27, 2025
MicroPayments <= 2.9.29 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-31075 6.4 Muhammad Yudha - DJ March 28, 2025
MicroPayments <= 3.2.4 - Reflected Cross-Site Scripting Patched CVE-2025-26579 6.1 João Pedro Soares de Alcântara March 12, 2025
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet <= 2.9.29 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-13391 6.4 SOPROBRO January 17, 2025
MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership <= 1.9.5 - Cross-Site Request Forgery Patched CVE-2022-27629 5.4 Kosuke Sakai April 20, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation