Sensitive Data Exposure in Codection Import and Export Plugin for WordPress

CVE-2025-24689

Summary

A vulnerability has been identified in the Codection Import and Export Users and Customers plugin, which leads to the exposure of sensitive information through externally-accessible files or directories. This flaw can allow unauthorized retrieval of embedded sensitive data during the import and export processes for users and customers. Users of the affected versions, specifically from n/a through 1.27.12, are encouraged to take immediate action to mitigate potential data breaches and enhance their security posture.

References