PT-2022-24882 · WordPress · Directorist

Name of the Vulnerable Software and Affected Versions: Directorist WordPress plugin versions prior to 7.4.2.2 Description: The issue allows an attacker to exploit an IDOR vulnerability, enabling them to change the password of arbitrary users instead of their own. Recommendations: For Directorist...