WorkExaminer Professional transmits all traffic between monitoring clients, console, and server in plaintext, including data sent via unencrypted FTP on port 12304 and unencrypted console-server communication on port 12306. This exposure allows attackers with network access to read sensitive data and modify it in transit.