Description
The Paid Memberships Pro WordPress plugin before 2.12.9 does not prevent user with at least the contributor role from leaking other users' sensitive metadata.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Paid Memberships Pro | < 2.12.9 | 2.12.9 |
References
- https://wpscan.com/vulnerability/4c537264-0c23-428e-9a11-7a9e74fb6b69/ exploit vdb-entry technical-description