CVE-2024-11088

The Simple Membership plugin for WordPress contains a sensitive information exposure vulnerability affecting versions 4.5.5 and earlier. Unauthenticated users can exploit WordPress's native search functionality to access sensitive data from posts that should be restricted to administrators and other high-privilege roles. This flaw allows attackers to bypass the plugin's access controls and view protected content without proper authorization. The vulnerability has been resolved in version 4.5.6.

Based on public CVE data (MITRE/NVD).