MemberPress WordPress Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure exists in the MemberPress plugin for WordPress, affecting all versions through 1.11.37. This issue arises from an unauthenticated content restriction bypass, enabling attackers to access sensitive data from posts restricted to higher-level roles, such as administrators, via the WordPress core search feature.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, such as data from posts restricted to administrators.

Remediation

Users are advised to update the MemberPress plugin to version 1.12.0 or a newer patched version.