The CE21 Suite plugin for WordPress up to and including version 2.3.1 has a vulnerability that exposes sensitive information via its log file. Unauthenticated attackers can exploit this flaw to extract sensitive data such as authentication credentials. This includes credentials for users who have used the plugin's custom authentication feature, potentially allowing attackers to log in as those users, including administrators, leading to a full site takeover.