Kirki < 6.2.0 - Subscriber+ Sensitive User Data Disclosure via 'context' Parameter

Description

The plugin is vulnerable to authorization bypass due to not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with custom-level access and above, to read arbitrary user metadata and sensitive user record fields — including email address, assigned roles, registration date, and any user_meta values — belonging to any WordPress user including administrators, by supplying a target user ID with a user-type context to the frontend collection endpoint.