CVE-2022-2376CWE-862

Directorist < 7.3.1 - Unauthenticated Email Address Disclosure

published September 5, 2022

CVSS
—
EPSS
2%
Percentile
78.8
In the wild
Unconfirmed
What it is

The Directorist WordPress plugin before 7.3.1 discloses the email address of all users in an AJAX action available to both unauthenticated and any authenticated users

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01836 · 78.8th percentile
Weakness
CWE-862 · Missing Authorization
Published
2022-09-05T12:35Z
EPSS history
Timeline
  • 05 SEP 12:35Z
    Directorist < 7.3.1 - Unauthenticated Email Address Disclosure
    cvelistv5