title: KiviCare Management System < 3.2.1 - Subscriber+ Sensitive Information Disclosure
description: The KiviCare WordPress plugin before 3.2.1 does not restrict the information returned in a response and returns all user data, allowing low privilege users such as subscriber to retrieve sensitive information such as the user email and hashed password of other users
problem types: CWE-200 Information Exposure
affected:
{
vendor: Unknown
product: KiviCare
versions:
status: affected, versionType: custom, version: 0, lessThan: 3.2.1
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}