Description
The API exposes sensitive information (Personally Identifiable Information (PII)) due to a vulnerability in the authorization process. An unauthenticated attacker can gain access to the personal data.
Remediation
Implement a robust authorization mechanism
References
Related Vulnerabilities
WordPress Plugin AI ChatBot Information Disclosure (4.8.9)
WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Information Disclosure (3.4.3)
WordPress Plugin Caldera Forms-More Than Contact Forms Information Disclosure (1.3.5.2)
WordPress Plugin Membership Simplified Arbitrary File Download (1.58)
WordPress Plugin Advanced Custom Fields PRO Information Disclosure (6.0.2)