Description
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions version 2.5.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.5.3 or latest
References
Related Vulnerabilities
WordPress Plugin Archivist-Custom Archive Templates Multiple Vulnerabilities (1.7.4)
Oracle JRE CVE-2020-2756 Vulnerability (CVE-2020-2756)
PHP Integer Overflow or Wraparound Vulnerability (CVE-2016-5095)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-4300)
Oracle Database Server CVE-2010-2391 Vulnerability (CVE-2010-2391)