WP Engine summary of the vulnerability: Information useful to an attacker could be made available. Site configuration, user names, or email addresses are examples of information that could be revealed as a result of an information disclosure. This vulnerability’s information has been verified by Patchstack. Please note that questions related to this notification should be directed to Patchstack, the plugin author or the 3rd-party researcher for the most accurate information. Resources providing further information on this vulnerability:
https://patchstack.com/database/vulnerability/mailjet-for-wordpress/wordpress-mailjet-email-marketing-plugin-6-2-3-sensitive-data-exposure-vulnerability?_a_id=473
Why isn’t there an update yet?!