CVE-2022-2373CWE-862
Simply Schedule Appointments < 1.5.7.7 - Unauthenticated Email Address Disclosure
published August 29, 2022
What it is
The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.01857 · 79.0th percentile
- Weakness
- CWE-862 · Missing Authorization
- Published
- 2022-08-29T17:15Z
EPSS history
Timeline