Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-2376

Directorist < 7.3.1 - Unauthenticated Email Address Disclosure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Directorist WordPress plugin before 7.3.1 discloses the email address of all users in an AJAX action available to both unauthenticated and any authenticated users

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Directorist – WordPress Business Directory Plugin with Classified Ads Listings

  • 7.3.1 to < 7.3.1affected

References