Unrated

Paid Memberships Pro < 2.12.9 - Contributor+ Arbitrary User Custom Field Disclosure

CVE-2024-1279 First seen on SecPulse Mar 12, 2024

Original description The description as published by the source.

The Paid Memberships Pro WordPress plugin before 2.12.9 does not prevent user with at least the contributor role from leaking other users' sensitive metadata.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
report wpscan.com
web wordpress.org

Key facts

Severity: Unrated
Published: Mar 12, 2024
First seen on SecPulse: Mar 12, 2024

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:03