CVE-2022-2376
Directorist < 7.3.1 - Unauthenticated Email Address Disclosure
MEDIUM 5.3EPSS 1.8%
The Directorist WordPress plugin before 7.3.1 discloses the email address of all users in an AJAX action available to both unauthenticated and any authenticated users
- Affected
- Directorist – WordPress Business Directory Plugin with Classified Ads Listings
- CVSS v3.1 NVD
- 5.3 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - EPSS
- 1.84% chance of exploitation in the next 30 days, 79th percentile
- Nuclei
- medium · CWE-862
- Published
- 2022-09-05
- Updated
- 2024-08-03