WordPress User Meta Manager Plugin 3.4.6 - Information Disclosure
Because of this vulnerability, any user, who is registered, can perform many AJAX requests and in that way get all contents of "usermeta" DB table. Solution Upgrade to version 3.4.8...