The plugin is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address
https://example.com/wp-json/ssa/v1/users
Raad Haddad of Cloudyrion GmbH
Raad Haddad of Cloudyrion GmbH
Yes
2022-08-08 (about 1 years ago)
2022-08-08 (about 1 years ago)
2023-04-12 (about 5 months ago)