CVE-2020-5579
SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors.
Date published : 2020-05-20
https://jvn.jp/en/jp/JVN20248858/index.html
https://www.paidmembershipspro.com/pmpro-update-2-3-3-security-release/