CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Maucher Send Users Email allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Send Users Email: from n/a through 1.5.1.
Explanation of Vulnerability in Simple Terms
Send Users Email versions up to 1.5.1 expose sensitive information that can be accessed over the network without authentication. An attacker can read data that should be restricted, such as user details or email addresses. No user interaction or special privileges are required. Update to a version newer than 1.5.1 to resolve this issue.
What an attacker can do
Read sensitive user information and email addresses without logging in.
Potential impact on your site
User data and email addresses may be exposed to unauthorized visitors.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
