WordPress Core, the software that powers millions of websites, is vulnerable to a type of cyber attack known as Information Disclosure. This type of attack can lead to attackers accessing the email addresses of the people who create posts on WordPress-powered sites. This vulnerability exists in versions up to 6.0.3 when the post-by-email feature is enabled. If attackers manage to get hold of the email addresses, they can use them to launch further attacks.