Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions, 83143b8a4065f857319774a05d1bf3ae2a5946c1

CVE, Research URL: 83143b8a4065f857319774a05d1bf3ae2a5946c1
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Published on: Jan 12, 2024
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.12.7 (closed) Paid Memberships Pro <= 2.12.6 - Information Exposure in Debug Logs The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.12.6 via debug logs. This makes it possible for unauthenticated attackers to extract sensitive data including user passwords through debug logs.
Affected versions: max 2.12.7.
Status: vulnerable

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions, 83143b8a4065f857319774a05d1bf3ae2a5946c1