Originally published at: https://blog.bigorangeheart.org/2021/01/issues-with-user-profiles-wordfest-live-2021/
We want to open and transparent about an issue we became aware of early in the recent WordFest Live 2021 event. Via the WordPress REST API endpoint: /wp-json/wp/v2/users Logged in users could view the email address and name of fellow registered attendees. We are highlighting this as part of our registration process provided the option…