Sensitive Information Exposure in Import WP Plugin for WordPress

CVE-2024-13562

What is CVE-2024-13562?

The Import WP – Export and Import CSV and XML files plugin for WordPress is exposed to a vulnerability that allows unauthorized users to access sensitive information from the /wp-content/uploads/ directory. This vulnerability affects all versions up to and including 2.14.5. When exploited, it could lead to the leakage of sensitive data, such as user details and locally stored files, posing a significant security risk for WordPress websites. Proper measures should be taken to patch this issue and secure your data.

References