CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information into Log File vulnerability in Paid Memberships Pro Paid Memberships Pro – Mailchimp Add On pmpro-mailchimp.This issue affects Paid Memberships Pro – Mailchimp Add On: from n/a through 2.3.4.
Explanation of Vulnerability in Simple Terms
The Mailchimp Add-On for Paid Memberships Pro exposes sensitive information through improper logging or data handling. An attacker on the network can read low-sensitivity data without authentication. The vulnerability affects versions up to 2.3.4. Update to a version newer than 2.3.4 to remediate.
What an attacker can do
Read sensitive data transmitted between the plugin and Mailchimp without authentication.
Potential impact on your site
Member data or API credentials may be exposed to unauthenticated network observers.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
