Lucene search
HistoryAug 29, 2022 - 6:15 p.m.
CVE-2022-2373
simply schedule appointments
wordpress plugin
cve-2022-2373
authorisation vulnerability
rest endpoint
unauthenticated users
user details
name
email address
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.003 Low
EPSS
Percentile
69.3%
The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address
Affected configurations
Node
nsquasimply_schedule_appointmentsRange<1.5.7.7wordpress
Related
wpexploit
wpexploit
patchstack
patchstack
nuclei
nuclei
WordPress Simply Schedule Appointments <1.5.7.7 - Information Disclosure
2022-11-09 14:43:06
cve
cve
CVE-2022-2373
2022-08-29 18:15:09
cvelist
cvelist
wpvulndb
wpvulndb
prion
prion
Authentication flaw
2022-08-29 18:15:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.003 Low
EPSS
Percentile
69.3%
Related for NVD:CVE-2022-2373