CVE-2024-11290

Summary

CVE-2024-11290 is a vulnerability affecting the Member Access plugin for WordPress. In versions up to 1.1.6, this issue allows unauthenticated attackers to extract sensitive information through the WordPress core search feature. The vulnerability impacts data in posts that have been restricted to higher-level roles like administrator, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.