CVE-2022-2834

CVE-2022-2834 describes a vulnerability in the Helpful WordPress plugin prior to version 4.5.26, where exported logs and feedback files are stored in publicly accessible locations with predictable names. This allows unauthenticated attackers to download these files and potentially retrieve sensitive information like IP addresses, names, and email addresses, depending on the plugin's configuration. Rated with a CVSS score of 5.3 (Medium), this vulnerability has a low impact on confidentiality and requires no user interaction or privileges to exploit. Currently, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.