WP Directory Kit Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure has been identified in the WP Directory Kit plugin for WordPress, affecting all versions through 1.4.9. The issue arises in the wdk_public_action AJAX handler, where unauthenticated attackers can extract email addresses of users with specific Directory Kit roles.

Impact

Exploitation of this vulnerability allows for unauthorized access to email addresses of users with Directory Kit-specific roles.

Remediation

Users are advised to update the WP Directory Kit plugin to version 1.5.0 or a newer patched version.