This vulnerability in David Maucher Send Users Email arises from functionality that is not properly constrained by access control lists (ACLs), allowing unauthorized access to sensitive information. The issue affects all versions up to 1.5.1. The CVSS vector indicates that the vulnerability can be exploited remotely without authentication or user interaction, but the impact is limited to confidentiality loss without integrity or availability impact. No official patch or vendor advisory detailing remediation is currently available.

An attacker can remotely access sensitive information that should be protected by access controls. The confidentiality of data is compromised, but there is no impact on data integrity or system availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from the vendor. No specific temporary mitigations are documented at this time.