WPS Bidouille < 1.33.5 - Subscriber+ User Email Disclosure via wps_get_users

Description

The plugin does not have proper authorisation checks in an AJAX action, allowing any authenticated user, such as a subscriber, to retrieve the email addresses of all registered users.