PT-2024-17770 · Unknown · Pmpro-Member-Directory

Scott Kingsley Clark · Published 2024-07-30 · Updated 2025-08-22 · CVE-2024-1287

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions pmpro-member-directory versions prior to 1.2.6

Description The issue allows users with at least the contributor role to leak other users' sensitive information, including password hashes.

Recommendations For versions prior to 1.2.6, update to version 1.2.6 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-202

Related Identifiers

CVE-2024-1287

Affected Products

Pmpro-Member-Directory

References · 6

• 🔥 https://wpscan.com/vulnerability/169e5756-4e12-4add-82e9-47471c30f08c · Exploit
• https://osv.dev/vulnerability/CVE-2024-1287 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-1287 · Security Note
• https://t.me/cvedetector/1988 · Telegram Post
• https://t.me/cvenotify/87862 · Telegram Post
• https://t.me/cveNotify/133148 · Telegram Post