Access violation vulnerability in Emails Catch All 3.5.3

The Emails Catch All plugin for WordPress has a security issue that could allow unauthorized users to gain access to sensitive information. This is because the plugin does not properly restrict access to email logs, which means that attackers with certain levels of access could trigger a password reset email and view it in the logs. This could ultimately lead to them resetting a user’s password and accessing their account.