Secure Copy Content Protection and Content Locking WordPress Plugin Sensitive Information Exposure Vulnerability

A vulnerability in the Secure Copy Content Protection and Content Locking plugin for WordPress, present in all versions through 4.9.2, allows for unauthorized access to sensitive user information. This issue arises because exported CSV files are stored in a publicly accessible directory with predictable filenames. Unauthenticated attackers can retrieve sensitive data such as emails, IP addresses, usernames, roles, and location information by directly accessing the exported CSV files.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive user data, including emails, IP addresses, usernames, roles, and location information.

Reproduction

The vulnerability can be reproduced by exporting results through the plugin's export feature. This action will generate a CSV file that is saved in a public directory. The exported file can then be accessed by anyone, without authentication, leading to exposure of sensitive user information.

Remediation

Users are advised to update the plugin to version 4.9.3 or later, where this vulnerability has been patched.