CVE-2024-7648

Summary

CVE-2024-7648 is a vulnerability affecting the Opal Membership plugin for WordPress. This issue allows authenticated attackers with subscriber-level access or higher to view sensitive information, specifically private notes, via recent comments on payments. This functionality is intended to be restricted to administrators only. Versions of the plugin up to and including 1.2.4 are vulnerable to this Sensitive Information Exposure issue. WordPress users are advised to update to the latest version of the Opal Membership plugin to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.