Magic Import Document Extractor WordPress Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure has been identified in the Magic Import Document Extractor plugin for WordPress, affecting all versions through 1.0.4. The issue arises in the get_frontend_settings() function, where unauthenticated attackers can access the site's magicimport.ai license key from the page source of any page that includes the plugin's shortcode.

Impact

Exploitation of this vulnerability allows unauthenticated users to access sensitive information, specifically the magicimport.ai license key, from the page source of affected WordPress sites.