CVE-2022-0345

The CVE-2022-0345 entry concerns the WordPress plugin Better Notifications for WP (BNFW) versions prior to 1.8.7. A lack of authorization and CSRF protection in the bnfw_search_users AJAX action enables any authenticated user to query user e-mail prefixes, effectively disclosing email prefixes (f...