Designinvento DirectoryPress Plugin Sensitive Data Exposure Vulnerability

A vulnerability allowing the exposure of sensitive system information to an unauthorized control sphere has been identified in the Designinvento DirectoryPress plugin, specifically in versions through 3.6.26. This issue allows embedded sensitive data to be retrieved, potentially leading to further exploitation of the system.

Impact

Exploitation of this vulnerability could allow unauthorized users to access sensitive information that is typically restricted, which could be used to exploit other vulnerabilities within the system.

Remediation

Users of the DirectoryPress plugin should update to version 3.6.27 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.