The Ultimate Member Widgets for Elementor – WordPress User Directory plugin suffers from a missing capability check in the handle_filter_users function. This authorization bypass allows unauthenticated attackers to retrieve partial user metadata such as first name, last name, and email addresses. The issue affects all versions up to 2.3. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low complexity, no privileges required, no user interaction, and limited confidentiality impact. No known exploits are reported in the wild. No patch or official fix is currently available.

An attacker without authentication can access partial user metadata including first name, last name, and email addresses. This exposure compromises user privacy but does not affect system integrity or availability. The impact is limited to confidentiality of user information stored in the WordPress site using this plugin.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting access to the affected plugin's functionality or disabling the plugin if feasible to prevent unauthorized data access.