CVE-2024-11008

Summary

CVE-2024-11008 is a Sensitive Information Exposure vulnerability affecting the Members – Membership & User Role Editor Plugin for WordPress. Versions up to and including 3.2.10 are vulnerable. This issue arises due to the plugin's interaction with the WordPress core search feature. Unauthenticated attackers can exploit this vulnerability to extract sensitive data from posts that have been restricted to higher-level roles like administrator.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.