Lucene search
Krzysztof ZającWPVDB-ID:437C4330-376A-4392-86C6-C4C7ED9583ADHistoryAug 10, 2022 - 12:00 a.m.
Directorist < 7.3.1 - Unauthenticated Email Address Disclosure
2022-08-1000:00:00
Krzysztof Zając
wpscan.com
25
0.037 Low
EPSS
Percentile
91.8%
The plugin discloses the email address of all users in an AJAX action available to both unauthenticated and any authenticated users
PoC
https://example.com/wp-admin/admin-ajax.php?action=directorist_author_pagination
| CPE | Name | Operator | Version |
|---|---|---|---|
| directorist | lt | 7.3.1 |
Related
cve
cve
CVE-2022-2376
2022-09-05 13:15:08
nuclei
nuclei
WordPress Directorist <7.3.1 - Information Disclosure
2022-09-06 08:57:31
patchstack
patchstack
cvelist
cvelist
CVE-2022-2376 Directorist < 7.3.1 - Unauthenticated Email Address Disclosure
2022-09-05 12:35:19
prion
prion
Code injection
2022-09-05 13:15:00
wpexploit
wpexploit
Directorist < 7.3.1 - Unauthenticated Email Address Disclosure
2022-08-10 00:00:00
nvd
nvd
CVE-2022-2376
2022-09-05 13:15:08