Information Disclosure in User Private Files WordPress Plugin

Executive Summary

This vulnerability in the User Private Files WordPress plugin before version 2.1.9 allows any authenticated user, including those with Subscriber-level access, to obtain the email addresses of any registered account, including administrators. The issue occurs because the plugin fails to validate that a supplied user belongs to the document being accessed before returning their email address.

Useful 0 Not Useful 0

Detection Guidance

Check the installed version of the User Private Files WordPress plugin. If it is below 2.1.9, the system is vulnerable. Use commands like 'wp plugin list' in WordPress CLI or inspect the plugin files directly.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to unauthorized disclosure of sensitive email addresses, potentially exposing users to phishing attacks, spam, or other privacy violations. Attackers could gather administrator emails to target high-privilege accounts or collect user data for malicious purposes.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability may violate privacy regulations like GDPR and HIPAA by exposing personal data (email addresses) without proper authorization. GDPR requires protecting personal data, and HIPAA mandates safeguarding protected health information, making this flaw a potential compliance risk.

Useful 0 Not Useful 0

Mitigation Strategies

Update the User Private Files plugin to version 2.1.9 or later immediately. If updating is not possible, consider disabling the plugin temporarily until an update can be applied.

Useful 0 Not Useful 0