The plugin is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address
https://example.com/wp-json/ssa/v1/users
Raad Haddad of Cloudyrion GmbH
Raad Haddad of Cloudyrion GmbH
Yes
2022-08-08 (about 9 months ago)
2022-08-08 (about 9 months ago)
2023-04-12 (about 1 months ago)