Unauthorized User Data Exposure in WP Directory Kit WordPress Plugin

Executive Summary

The WP Directory Kit WordPress plugin before version 1.5.5 has a vulnerability where it fails to perform authorization or nonce checks on an authenticated AJAX action. This allows any authenticated user, including those with Subscriber-level access, to access sensitive data such as the site's user list and unpublished listings created by other users.

Useful 0 Not Useful 0

Detection Guidance

Check if the WP Directory Kit plugin version is below 1.5.5. Log in as a Subscriber or higher and attempt to access the vulnerable AJAX action to see if user lists or unpublished listings are disclosed.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to unauthorized disclosure of sensitive information. Attackers could access the full list of site users and view unpublished listings from other users, potentially exposing private or confidential data.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to non-compliance with data protection regulations like GDPR or HIPAA by exposing personal or sensitive user data without authorization. Organizations may face legal penalties or reputational damage if such data breaches occur.

Useful 0 Not Useful 0

Mitigation Strategies

Update the WP Directory Kit plugin to version 1.5.5 or later immediately to patch the missing authorization and nonce checks.

Useful 0 Not Useful 0