CyberRota Analysis
AI-GeneratedThe ProfileGrid WordPress plugin prior to version 6.0.0.0 lacks proper authorization checks, enabling any authenticated user, including Subscribers, to access and disclose sensitive information about pending membership requests for any group, including private ones. This vulnerability could lead to unauthorized exposure of user data, potentially impacting user privacy and group confidentiality. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk.
Original NVD Description
The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks when listing a group's pending membership requests, allowing any authenticated user such as a Subscriber to disclose the names and request dates of the users awaiting approval to join any group, including private ones.