Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions, f82e76e5-94df-49e4-8f10-6524e26b0284

CVE, Research URL: f82e76e5-94df-49e4-8f10-6524e26b0284
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Published on: -
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.5.3 (closed) Paid Membership Pro < 2.5.3 - Unauthorised Order Information Disclosure The pmpro_get_order_json AJAX action, available to authenticated user did not check for authorisation, allowing any authenticated users to retrieve arbitrary order information (such as customer names, email addresses, and order numbers) via the order_id parameter.
Affected versions: max 2.5.3.
Status: vulnerable

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions, f82e76e5-94df-49e4-8f10-6524e26b0284