CVE-2023-6733: WP-Members Membership Plugin <= 3.4.8 - Missing Authorization to Sensitive Information Exposure
The WP-Members Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.8 via the wpmemfield shortcode. This makes it possible for authenticated attackers, with contributor access and above, to extract sensitive data including user emails, password hashes, usernames, and more.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6733?
CVE-2023-6733 is classified as a medium-severity vulnerability due to its potential for sensitive information exposure.
How do I fix CVE-2023-6733?
To fix CVE-2023-6733, update the WP-Members Membership Plugin to version 3.4.9 or later.
Who is affected by CVE-2023-6733?
CVE-2023-6733 affects users of the WP-Members Membership Plugin for WordPress with versions 3.4.8 and earlier.
What type of vulnerability is CVE-2023-6733?
CVE-2023-6733 is a sensitivity information exposure vulnerability allowing authenticated attackers to extract sensitive data.
What access level is required to exploit CVE-2023-6733?
Authenticated users with contributor access and above can exploit CVE-2023-6733.