⛺️ WordFest Live - The Festival of WordPress Catch Up Now
We appreciate you being here. Get notified of our new posts:

Issues with user profiles – WordFest Live 2021

share

We want to open and transparent about an issue we became aware of early in the recent WordFest Live 2021 event.  Via the WordPress REST API endpoint:

/wp-json/wp/v2/users

Logged in users could view the email address and name of fellow registered attendees. 

We are highlighting this as part of our registration process provided the option for attendees not to have these details publicly available.  This data was only available to other logged in users and via the specific endpoint.  This issue impacts only those attendees that specifically opted not to have their profile visible on the public-facing Attendees page. 

No passwords or other personable identifiable information was exposed.  The team resolved the issues within minutes of being highlighted.  We understand the responsibility of handling personal data and would like to ensure all attendees that this issue was managed with the highest priority.  

As a result of this issue, we are implementing additional measures to review our development cycle practices.  As part of an internal review, we went through the ICO self-assessment for security breaches, at this time we believe this issue does not require reporting.  However, we will reassess if, during a further review, any additional evidence presents. 

“There is no requirement to notify the ICO but you should keep a note of why you came to this decision.  If new information which affects the circumstances of this breach comes to light, you should reassess the risk and determine whether it becomes reportable at that point.”

ICO self-assessment result.

If you have any questions in relation to this, please contact us via the Contact Form on this website: https://www.wordfest.live/contact/

Related Posts

Why Mixed Emotions are OK

Whatever you're feeling after an event, it's OK. And confusion about the swirling seemingly opposing emotions is OK, too. Mixed emotions are OK.

How The Spoon Theory Can Help With Communication

Spoon Theory is a concept created by a woman named Christine Miserandino in 2003. It is a simple but powerful way of describing the limited ...

WordFest Live Rescheduled to December 16

The entire WordFest team of organizers and volunteers is excited to be actively planning for the next WordFest live this year. We do regret to ...

Remote Work: the Surprising Effects on Wellbeing

Working from home may have some drawbacks, but the benefits far outweigh any negativity. This post looks at finding the good in remote work.

Post Author

Your Comments