Codection WordPress Import and Export Users and Customers Plugin Sensitive Data Exposure Vulnerability

A vulnerability allowing the retrieval of embedded sensitive data has been identified in the Codection WordPress plugin 'Import and Export Users and Customers', versions prior to 1.27.12. This issue arises from the improper handling of sensitive information, which is inadvertently exposed through files or directories that are accessible externally.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, which could be used to exploit other weaknesses within the system.

Remediation

Users of the affected WordPress plugin should update to version 1.27.13 or later. Patchstack users can enable auto-update for vulnerable plugins.