Majestic Support WordPress Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure exists in the Majestic Support WordPress plugin, specifically in versions through 1.0.5. The issue arises from an unprotected directory, 'majesticsupportdata', within the 'wp-content/uploads' folder. This vulnerability enables unauthenticated attackers to access and extract sensitive data, including file attachments from support tickets, stored insecurely in the designated directory.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, such as private file attachments included in support tickets.

Remediation

Users can update to version 1.0.6 or a newer patched version to address this vulnerability.