Export WP Page to Static HTML & PDF Plugin Sensitive Information Exposure Vulnerability
Vulnerability
A vulnerability allowing sensitive information exposure has been identified in the Export WP Page to Static HTML & PDF plugin for WordPress, affecting all versions through 4.3.4. The issue arises from publicly accessible cookies.txt files that contain authentication cookies. This vulnerability enables unauthenticated attackers to access cookies that may have been logged if the site administrator performed a backup using certain user roles, such as 'administrator'.
Impact
Exploitation of this vulnerability could lead to unauthorized access to authentication cookies, potentially allowing attackers to hijack user sessions.
Remediation
Users are advised to update the Export WP Page to Static HTML & PDF plugin to version 5.0.0 or a newer patched version.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.