CVE-2022-2376

Publication date

2022-09-05 12:35:19

Family

WPScan

State

PUBLISHED

Description

The Directorist WordPress plugin before 7.3.1 discloses the email address of all users in an AJAX action available to both unauthenticated and any authenticated users