CVE-2024-11088

CVE-2024-11088 is a sensitive information exposure vulnerability affecting all versions of the Simple Membership plugin for WordPress up to and including 4.5.5. This flaw allows unauthenticated attackers to leverage the WordPress core search feature to extract restricted data from posts, even if those posts are intended for higher-level user roles like administrators. With a CVSS score of 7.5 (HIGH), the vulnerability is easily exploitable over the network without user interaction, leading to a high impact on confidentiality. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB, and it has received minimal community discussion or media coverage.