The Directorist WordPress plugin before 7.3.1 discloses the email address of all users in an AJAX action available to both unauthenticated and any authenticated users
CVSS
No CVSS.
References
Configurations
No configuration.
Information
Published : 2022-09-05 06:15
Updated : 2022-09-05 21:07
NVD link : CVE-2022-2376
Mitre link : CVE-2022-2376
JSON object : View
CWE
CWE-862
Missing Authorization
Products Affected
No product.