CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.8 via the download_user_ajax function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive data including usernames, hashed passwords, and emails.
Explanation of Vulnerability in Simple Terms
The Ultimate WordPress Toolkit plugin versions 3.0.8 and earlier expose sensitive information to authenticated users. A logged-in attacker with low privileges can read data they should not have access to, such as configuration details or other users' information. Update the plugin immediately to a version newer than 3.0.8.
What an attacker can do
Read sensitive data like configuration settings or other users' information.
Potential impact on your site
Confidential site data may be exposed to any authenticated user, including subscribers.
Conditions required to exploit
Attacker must be logged in to WordPress with at least a low-privilege account.
Key dates
External resources
Related vulnerabilities
