{"id":7618,"date":"2025-07-04T16:11:02","date_gmt":"2025-07-04T16:11:02","guid":{"rendered":"http:\/\/localhost\/?p=7618"},"modified":"2025-07-04T16:11:02","modified_gmt":"2025-07-04T16:11:02","slug":"paid-memberships-pro-member-directory-add-on-126-contributor-sensitive-information-disclosure-and-sq","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=7618","title":{"rendered":"Paid Memberships Pro – Member Directory Add On < 1.2.6 - Contributor+ Sensitive Information Disclosure and SQLi"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nPaid Memberships Pro – Member Directory Add On < 1.2.6 - Contributor+ Sensitive Information Disclosure and SQLi<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2024-07-30T06:00:06.053Z<\/td>\n<\/tr>\n
Modified<\/th>\n2024-08-01T18:33:25.572Z<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nUnknown<\/td>\n<\/tr>\n
Product<\/th>\npmpro-member-directory<\/td>\n<\/tr>\n
Version<\/th>\n0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n
Base Score<\/th>\n0.0 ()<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nThe pmpro-member-directory WordPress plugin before version 1.2.6 allows users with contributor roles or higher to access sensitive information, including password hashes, due to insufficient access controls. This vulnerability could lead to unauthorized data disclosure and potential SQL injection attacks.<\/td>\n<\/tr>\n
AI Severity<\/th>\nHigh<\/td>\n<\/tr>\n
AI Vendor<\/th>\nWordPress Community<\/td>\n<\/tr>\n
AI Product<\/th>\npmpro-member-directory<\/td>\n<\/tr>\n
AI Version<\/th>\n< 1.2.6<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n