Authentication flaw

2022-08-2918:15:00

PRIOn knowledge base

www.prio-n.com

simply schedule appointments

wordpress

authentication

flaw

rest endpoint

unauthenticated users

user details

name

email address

0.003 Low

EPSS

Percentile

69.3%

JSON

The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address

CPENameOperatorVersion
simply_schedule_appointmentslt1.5.7.7

CPE	Name	Operator	Version
	simply_schedule_appointments	lt	1.5.7.7

References

wpscan.com/vulnerability/6aa9aa0d-b447-4584-a07e-b8a0d1b83a31

0.003 Low

EPSS

Percentile

69.3%

JSON

Related for PRION:CVE-2022-2373