The plugin called “Paid Memberships Pro” for WordPress has a security issue where sensitive information can be accessed by attackers who have contributor-level access or higher. This can happen in all versions up to 2.12.8. This can occur when using the pmpro_member shortcode.