Sensitive Data Exposure in Codection Import and Export Plugin for WordPress
CVE-2025-24689
5.9MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 27 January 2025
What is CVE-2025-24689?
A vulnerability has been identified in the Codection Import and Export Users and Customers plugin, which leads to the exposure of sensitive information through externally-accessible files or directories. This flaw can allow unauthorized retrieval of embedded sensitive data during the import and export processes for users and customers. Users of the affected versions, specifically from n/a through 1.27.12, are encouraged to take immediate action to mitigate potential data breaches and enhance their security posture.
Affected Version(s)
Import and export users and customers <= 1.27.12