Medium severity4.3NVD Advisory· Published Mar 11, 2024· Updated Jun 17, 2026

CVE-2024-1279

Description

The Paid Memberships Pro WordPress plugin before 2.12.9 does not prevent user with at least the contributor role from leaking other users' sensitive metadata.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Strangerstudios/Paid Memberships Pro
cpe:2.3:a:strangerstudios:paid_memberships_pro:*:*:*:*:*:wordpress:*:*
Range: <2.12.9
WordPress/Paid Membershipcpe-rescue
Package: https://wordpress.org/plugins/paid-membership
WordPress/Paid Memberships Prollm-fuzzy
Range: <2.12.9

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/4c537264-0c23-428e-9a11-7a9e74fb6b69/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000