[wp-trac] [WordPress Trac] #31731: Mass email Plugin for multisite accessing all emails of users registered

[WordPress Trac]

#31731: Mass email Plugin for multisite accessing all emails of users registered
----------------------------+-----------------------------
 Reporter:  nagarajurepala  |      Owner:
     Type:  defect (bug)    |     Status:  new
 Priority:  normal          |  Milestone:  Awaiting Review
Component:  Plugins         |    Version:  4.1.1
 Severity:  normal          |   Keywords:
  Focuses:                  |
----------------------------+-----------------------------
 Hello Wordpress team,
  while testing plugins in multi site i have found issue with one plugin
 "mass mail"
 where we are able to send mails to all users registered /created sites in
 multisite network by one of the website admin created in multisite(he is
 not the super-admin).So i think the information shouldnot be leaked as
 emails are only accessed by only superadmin, by this we can send
 bulkmails(large content of spam mails)

--
Ticket URL: <https://core.trac.wordpress.org/ticket/31731>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform