A plugin called “Export All Posts, Products, Orders, Refunds & Users” for WordPress has a security issue in all versions up to 2.9. This means that someone with a high level of access, like an administrator, could read important files on the server without permission.