Broadstreet WordPress Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure has been identified in the Broadstreet plugin for WordPress, affecting all versions through 1.53.1. The issue arises in the get_sponsored_meta() AJAX action, where authenticated attackers with subscriber-level access and above can access data from password-protected and private business details.

Impact

Exploitation of this vulnerability allows authenticated users to access sensitive business information that is meant to be private or protected by a password.

Remediation

Users can update to Broadstreet version 1.53.2 or a newer patched version to address this vulnerability.