CVE-2024-12269 is a missing authorization vulnerability in the Safe Ai Malware Protection for WP plugin for WordPress, affecting all versions up to and including 1.0.17. The export_db() function lacks a capability check, enabling unauthenticated attackers to obtain a complete database dump. This vulnerability is categorized under CWE-862 and has a CVSS 3.1 base score of 7.5, reflecting high severity due to the potential confidentiality impact. No patch or official fix has been documented in the provided data.

An attacker can exploit this vulnerability to retrieve the entire database of the affected WordPress site without authentication. This leads to a complete confidentiality breach of stored data. There is no indication of impact on integrity or availability. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the plugin's functionality and consider disabling or removing the plugin if possible to prevent unauthorized database export. Monitor vendor channels for updates and apply patches promptly once released.