A popular WordPress plugin called Paid Memberships Pro, which is used for restricting content, registering users, and managing paid subscriptions, has a security issue. This issue allows attackers who have contributor-level access or higher to view sensitive information about users by using a specific shortcode.