CyberRota Analysis
AI-GeneratedThe ProfileGrid WordPress plugin prior to version 6.0.0.0 lacks proper authorization checks, enabling unauthenticated users to access and disclose the member lists of any group, including those marked as private or closed. This vulnerability poses a significant risk to user privacy and data confidentiality. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate potential exposure of sensitive member information.
Original NVD Description
The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks before returning a group's member list, and registers the handler for unauthenticated users, allowing any unauthenticated visitor to disclose the members and their identifiers of any group, including private or closed ones, bypassing the ProfileGrid WordPress plugin before 6.0.0.0's member-visibility setting.