Import WP WordPress Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure exists in the Import WP – Export and Import CSV and XML files to WordPress plugin, affecting all versions through 2.14.5. The vulnerability arises from unprotected files in the uploads directory, enabling unauthenticated attackers to access sensitive data, such as user information and imported files, stored insecurely in the wp-content/uploads directory.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, including user data and files, stored in the wp-content/uploads directory.

Remediation

Users can update to version 2.14.6 or a newer patched version to address this vulnerability.