Moving Users WordPress Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure exists in the Moving Users plugin for WordPress, affecting all versions through 1.05. The issue arises from the export functionality, where JSON files containing user data are saved in predictable locations with easily guessable file names. This flaw could enable unauthenticated attackers to access sensitive information such as email addresses, hashed passwords, and IP addresses.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive user information, including email addresses, hashed passwords, and IP addresses.

Remediation

Users can update to version 1.10 or a newer patched version to address this vulnerability.