IP2Location Redirection WordPress Plugin Missing Authorization Vulnerability in Settings Export

A vulnerability exists in the IP2Location Redirection plugin for WordPress, all versions through 1.33.3, due to a lack of proper capability checks on the 'download_ip2location_redirection_backup' AJAX action. This flaw allows unauthenticated attackers to access and download the plugin's settings, potentially leading to unauthorized data exposure.

Impact

Exploitation of this vulnerability could result in unauthorized access to the plugin's settings, allowing attackers to obtain sensitive configuration data.

Remediation

Users can update to version 1.33.4 or a newer patched version to address this vulnerability.