Description
Authenticated users were able to enumerate other users' names via the learning plans page.
Remediation
References
Related Vulnerabilities
WordPress 'admin-ajax.php' SQL Injection Vulnerability (2.1.3)
MySQL CVE-2013-2391 Vulnerability (CVE-2013-2391)
WordPress Plugin Slider Revolution Responsive Local File Inclusion (4.1.4)
Artifactory Missing Authorization Vulnerability (CVE-2026-65922)
WordPress Plugin WP Review Multiple Unspecified Vulnerabilities (2.0)