The CE21 Suite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.1 via the log file. This makes it possible for unauthenticated attackers to extract sensitive data including authentication credentials, which can be used to log in as other users as long as they have used the plugin's custom authentication feature before. This may include administrators, which makes a complete site takeover possible.
The CE21 Suite plugin stores sensitive information — including login credentials of users using the plugin's custom authentication mechanism — in a log file. This file is accessible without any authentication, allowing anyone from outside to read it. The obtained authentication credentials can be directly used to log into the WordPress site as another user.
An attacker can take over accounts of any users who used the plugin's authentication function, including administrator accounts — enabling complete control over the WordPress site.
The CE21 Suite plugin should be updated to a version newer than 2.3.1. Patches available from the vendor should be applied according to references. Additionally, it is recommended to immediately change passwords of users who used the custom authentication function of the plugin, and to check server logs for unauthorized access to the log file.
CE21 Suite plugin for WordPress — all versions up to 2.3.1 inclusive.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H