Access violation vulnerability in BitFire Security – Firewall, WAF, Bot/Spam Blocker, Login Security 4.5

The BitFire Security plugin for WordPress, which includes features such as Firewall, WAF, Bot/Spam Blocker, and Login Security, has a vulnerability that could expose sensitive information. This vulnerability affects all versions up to 4.5 and is caused by the bitfire_* directory automatically creating and storing potentially sensitive files without any access restrictions. This means that attackers who are not logged in could potentially access and extract sensitive data from files like config.ini and debug.log.