Access violation vulnerability in Paid Memberships Pro – Restrict Member Access to Content, Courses, Communities – Free or Paid Subscriptions 2.5.3

The Paid Memberships Pro plugin for WordPress, which is used to restrict access to content, courses, and communities, had a vulnerability up to version 2.5.2. This vulnerability made it possible for attackers to download order data for other users due to incorrect user validation and capability checking on the pmpro_get_order_json() function.