CVE-2022-1186 – Be POPIA Compliant <= 1.1.5 - Sensitive Information Exposure

https://notcve.org/view.php?id=CVE-2022-1186

The WordPress plugin Be POPIA Compliant exposed sensitive information to unauthenticated users consisting of site visitors emails and usernames via an API route, in versions up to an including 1.1.5. El plugin Be POPIA Compliant de WordPress expuso información confidencial a usuarios no autenticados consistente en correos electrónicos y nombres de usuario de los visitantes del sitio por medio de una ruta API, en versiones hasta 1.1.5 incluyéndola • https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2701343%40be-popia-compliant&new=2701343%40be-popia-compliant&sfp_email=&sfph_mail= https://www.wordfence.com/threat-intel/vulnerabilities/id/0fcdd6b5-a273-4916-a894-a753be0a7921?source=cve • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •