5.3
Medium
CVE-2024-11291 The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for…
Description
The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.13.4 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to higher-level roles such as logged-in users.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction 2.13 | earliest → 2.13.4 | No fix stated |
| Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction 2.13 | earliest → 2.13.4 | No fix stated |
Other CVEs of Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
The 4 CVEs of Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction →
CVE-2024-12919
The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for…
9.8
Critical
CVE-2024-10261
The The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for…
7.3
High
CVE-2024-9222
The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for…
6.1
Medium