An unauthenticated information exposure vulnerability in the Import WP plugin allows attackers to download sensitive administrative export files containing user personal data.

The plugin fails to perform necessary capability checks on its export-file download handler. This allows an unauthenticated attacker to retrieve files generated by administrators, provided they can obtain the required time-based download key.

The exploitation of this vulnerability leads to the unauthorized disclosure of sensitive user information, including email addresses, login names, and user roles. This poses a significant risk of privacy breaches and potential identity theft. While the CVSS score of 7.5 highlights the high severity of the flaw, the requirement to obtain a time-based key slightly moderates the immediate ease of exploitation.

Immediate Action: Update the Import WP plugin to version 2.14.23 or later immediately.

Proactive Monitoring: Review web server access logs for anomalous requests directed toward export-related endpoints or unexpected file access patterns.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block unauthorized access to the plugin's export download handler endpoints.

Public Exploit Available: Unknown

Given the exposure of sensitive user data, administrators must prioritize updating the Import WP plugin to version 2.14.23. Organizations should also conduct an internal audit of existing export files to determine if any sensitive data has been exposed during the period of vulnerability. Failure to remediate this issue promptly may result in significant data privacy compliance violations.