GiveWP plugin for WordPress revealed email addresses of donors in page source

Pi-hole got bit by this, they put up their own post-mortem: https://pi-hole.net/blog/2025/07/30/compromised-donor-emails...