WP Register Profile With Shortcode Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure exists in the WP Register Profile With Shortcode plugin for WordPress, affecting all versions through 3.6.2. The issue arises from the 'rp_user_data' shortcode, which allows authenticated attackers with Contributor-level access and above to access sensitive user meta data, including hashed passwords and usernames.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive user information, such as hashed passwords and usernames.

Remediation

Users are advised to update the WP Register Profile With Shortcode plugin to version 3.6.3 or a newer patched version.