Wise Chat WordPress Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure exists in the Wise Chat plugin for WordPress, affecting all versions through 3.3.3. The issue arises from unprotected files in the 'uploads' directory, where unauthenticated attackers can access sensitive data, including file attachments from chat messages. This vulnerability was partially addressed in version 3.3.3.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, such as private file attachments, stored in the WordPress uploads directory.

Remediation

Users are advised to update the Wise Chat plugin to version 3.3.4 or later.