CVE-2024-30523: 
WordPress vulnerability analysis and mitigation

The vulnerability (CVE-2024-30523) is a Sensitive Data Exposure issue affecting the Paid Memberships Pro – Mailchimp Add On WordPress plugin versions through 2.3.4. The vulnerability is classified as an Insertion of Sensitive Information into Log File vulnerability, which was discovered and reported on March 28, 2024 (Patchstack).

The vulnerability has been assigned a CVSS v3.1 base score of 5.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. It is classified under CWE-532 (Insertion of Sensitive Information into Log File). The vulnerability can be exploited without authentication, indicating a lower barrier to exploitation (Patchstack).

This vulnerability could allow malicious actors to view sensitive information that is normally not accessible to regular users. This exposed information could potentially be used to exploit other weaknesses in the system (Patchstack).

The vulnerability is classified as having a low severity impact and is considered unlikely to be exploited. It requires no authentication to exploit, making it accessible to unauthenticated attackers (Patchstack).

The vulnerability has been patched in version 2.3.5 of the Paid Memberships Pro – Mailchimp Add On plugin. Users are advised to update to version 2.3.5 or later to remove the vulnerability (Patchstack).