A recently discovered vulnerability discloses user email addresses even when they\u2019re set to private.