Sensitive Information Exposure in MemberPress Plugin for WordPress

CVE-2024-11299

What is CVE-2024-11299?

The MemberPress plugin for WordPress is prone to a vulnerability that enables unauthenticated attackers to gain access to sensitive information. This occurs through the WordPress core search feature, which may inadvertently expose restricted posts. Specifically, posts restricted to users with higher-level roles, such as administrators, can be revealed to attackers, potentially leading to unauthorized access and data leakage. It is crucial for website administrators using affected versions of MemberPress to update to the latest version to mitigate this risk.

References