WordPress Registration Forms Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure has been identified in the Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction plugin for WordPress. This issue affects all versions through 3.8.4 and arises from publicly accessible log files. As a result, unauthenticated attackers can potentially access sensitive user information contained in these logs.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive user information, such as personal details or registration data, through the exposed log files.

Remediation

Users are advised to update the plugin to version 3.8.4.1 or a newer patched version.