A plugin for WordPress called “Export All Posts, Products, Orders, Refunds & Users” has a security issue that affects all versions up to 2.9.3. The issue is related to a directory called “exports” and it allows unauthorized individuals to access sensitive information stored in the directory. This includes data such as user information.