Profile Extra Fields by BestWebSoft, CVE-2023-4469

CVE, Research URL: CVE-2023-4469
Home page URL: Security reports for Profile Extra Fields by BestWebSoft
Application: Profile Extra Fields by BestWebSoft
Published on: Oct 06, 2023
Research Description: The Profile Extra Fields by BestWebSoft plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the prflxtrflds_export_file function in versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to expose potentially sensitive user data, including data entered into custom fields.
Affected versions: max 1.2.8.
Status: vulnerable