CVE-2024-1286

The pmpro-membership-maps WordPress plugin before 0.7 does not prevent users with at least the contributor role from leaking sensitive information about users with a membership on the site.

Score

CVSS 3.1 4.9 Medium

Status

Analyzed - contact@wpscan.com

Published

2024-07-30

Last modified

2025-08-29

Affected products

• Maps (Paidmembershipspro)
• Paid Memberships Pro (Strangerstudios)
• Pmpro-membership-maps (Unknown)

References

• https://wpscan.com/vulnerability/49dc9ca3-d0ef-4a75-8b51-307e3e44e91b/