This vulnerability, tracked as CVE-2024-30514 and classified under CWE-532, concerns the Paid Memberships Pro – Payfast Gateway Add On. It allows sensitive information to be inserted into log files, potentially exposing confidential data. The affected versions include all versions up to 1.4.1. The CVSS 3.1 base score is 5.3, indicating a medium severity with network attack vector, low complexity, no privileges required, and no user interaction needed. The impact is limited to confidentiality loss without affecting integrity or availability. No vendor advisory or patch information is currently available.

The vulnerability may lead to unintended disclosure of sensitive information through application logs. This could allow an attacker or unauthorized party with access to logs to obtain confidential data. There is no indication of impact on data integrity or system availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review logging configurations to minimize sensitive data being logged and restrict access to log files to authorized personnel only.