Threats tagged 'ghsa-9c4h-7vg9-5hh6'

ProfileGrid WordPress plugin versions before 6.0.0.0 have a missing authorization vulnerability that allows unauthenticated users to access the member lists of any group, including private or closed groups. This bypasses the intended member-visibility settings and exposes member identifiers to anyone without authentication.