Description
WordPress Plugin Paid Memberships Pro is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin Paid Memberships Pro version 2.5.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.5.3 or latest
References
Related Vulnerabilities
WordPress Plugin Alpine PhotoTile for Instagram Cross-Site Scripting (1.2.7.7)
WordPress Plugin oQey Headers 'oqey_settings.php' SQL Injection (0.3)
WordPress Plugin Translate WordPress-Google Language Translator Cross-Site Scripting (5.0.05)
WordPress Plugin Membership 2 Unspecified Vulnerability (4.0.0.2)