WordPress plugin myCred licensing issue vulnerability (CNVD-2022-76222)

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. security vulnerabilities in versions of the WordPress plugin myCred prior to 2.4.4 stem from the following in its mycred-tools-import-export AJAX operation No authorization and cross-site request forgery checks. An attacker could use this vulnerability to invoke and retrieve a list of email addresses present in the blog.