High · published January 7, 2026
⚡ A simple crafted request lets someone off the street export all user data from the Latest Registered Users plugin! 🤯 Think of this vulnerability like a restaurant that forgot to check IDs at the door. Anyone can waltz in and grab the guest list, including private details, without ever ordering a meal! If left unfixed, an attacker could easily harvest user details from your site, putting personal information at risk and potentially leading to further attacks. This unauthorized data export could result in privacy violations and a loss of trust from your users. Yikes!
Think of this vulnerability like a restaurant that forgot to check IDs at the door. Anyone can waltz in and grab the guest list, including private details, without ever ordering a meal! The vulnerability arises from missing authorization checks and nonce validation in the rnd_handle_form_submit function, allowing unauthenticated attackers to exploit the 'action' parameter to export user details in CSV format.
If left unfixed, an attacker could easily harvest user details from your site, putting personal information at risk and potentially leading to further attacks. This unauthorized data export could result in privacy violations and a loss of trust from your users. Yikes! To protect your site, immediately update the Latest Registered Users plugin to version 1.5 or higher. Additionally, implement stricter checks for authorization and nonce validation to ensure that only authorized users can access export functionalities. You've got this! Fixing it is a piece of cake, and your users will appreciate the extra layer of security. 🛡️