CyberRota Analysis
AI-GeneratedThe Loops & Logic WordPress plugin prior to version 4.3.0 is vulnerable due to insufficient access controls on its public template-data action, enabling unauthenticated users to access sensitive user information, such as email addresses and roles, as well as arbitrary site options. This exposure could lead to privacy breaches and unauthorized data disclosure. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate potential risks.
Original NVD Description
The Loops & Logic WordPress plugin before 4.3.0 does not restrict its public template-data action to the data a visitor is permitted to see, allowing unauthenticated users to read arbitrary user records (including email addresses and roles) and arbitrary site options.