Access violation vulnerability in Opal Membership 1.2.4

The Opal Membership plugin for WordPress has a security issue that can expose sensitive information. This affects all versions up to and including 1.2.4. The problem is with the private notes feature on payments, which uses WordPress comments. This means that even users with subscriber-level access or higher can see private notes through recent comments, even though only administrators should have access to them.