WordPress PageLayer Plugin Sensitive Data Exposure Vulnerability

A vulnerability allowing the exposure of sensitive system information has been identified in the WordPress PageLayer plugin, specifically in versions through 2.0.8. This issue arises from the plugin's handling of embedded data, which can be retrieved by unauthorized users, potentially leading to the exploitation of other system weaknesses.

Impact

Exploitation of this vulnerability could allow unauthorized users to access sensitive information that is typically restricted, creating opportunities to exploit additional vulnerabilities within the system.

Remediation

Users of the WordPress PageLayer plugin should update to version 2.0.9 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.