The KiviCare WordPress plugin prior to 3.2.1 does not restrict the information returned in a response and returns all user data, allowing low privilege users such as subscriber to retrieve sensitive information such as the user email and hashed password of other users
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
iqonic kivicare |
Vulmon