You're viewing a limited, public preview. Log in for full access.
WPS Bidouille < 1.33.5 - Subscriber+ User Email Disclosure via wps_get_users
No AI analysis yet.
The WPS Bidouille WordPress plugin before 1.33.5 does not have proper authorisation checks in an AJAX action, allowing any authenticated user, such as a subscriber, to retrieve the email addresses of all registered users.
This link opens an external site that isn't part of the platform.