Safe Ai Malware Protection for WP Missing Authorization Vulnerability Allowing Unauthenticated Database Export

A vulnerability exists in the Safe Ai Malware Protection for WP plugin for WordPress, in all versions through 1.0.17. The issue arises from a lack of proper capability checks in the export_db() function, allowing unauthenticated attackers to access and download a complete dump of the site's database.

Impact

Exploitation of this vulnerability could lead to unauthorized access to the site's database, allowing attackers to retrieve sensitive information stored in the database.

Remediation

Users are advised to update the Safe Ai Malware Protection for WP plugin to version 1.0.18 or a newer patched version.