Threats tagged 'ghsa-wv4h-qxh7-5899'

A vulnerability in the Paid Membership Subscriptions WordPress plugin before version 3.0.7 allows unauthenticated users to download exported member and payment data files. These files, containing personally identifiable information (PII), are written to a predictable location in the uploads directory without proper access protection. This exposure can occur while the export artifact is present on the server.