From 706474df956daa90f78fb92535212a7cd72575f8 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Sat, 5 Apr 2025 03:32:03 +0000
Subject: [PATCH] Publish GHSA-mrp2-g378-9whc

---
 .../GHSA-mrp2-g378-9whc.json                  | 41 +++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100644 advisories/unreviewed/2025/04/GHSA-mrp2-g378-9whc/GHSA-mrp2-g378-9whc.json

diff --git a/advisories/unreviewed/2025/04/GHSA-mrp2-g378-9whc/GHSA-mrp2-g378-9whc.json b/advisories/unreviewed/2025/04/GHSA-mrp2-g378-9whc/GHSA-mrp2-g378-9whc.json
new file mode 100644
index 00000000000..4cde712831a
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-mrp2-g378-9whc/GHSA-mrp2-g378-9whc.json
@@ -0,0 +1,41 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mrp2-g378-9whc",
+  "modified": "2025-04-05T03:30:32Z",
+  "published": "2025-04-05T03:30:32Z",
+  "aliases": [
+    "CVE-2024-11088"
+  ],
+  "details": "The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.5 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to higher-level roles such as administrator.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11088"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3190023/simple-membership"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c1558b08-a33b-4cf2-bacb-c88065f513cc?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-200",
+      "CWE-276"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-21T14:15:08Z"
+  }
+}
\ No newline at end of file