Lucene search
HistoryAug 29, 2022 - 6:15 p.m.
CVE-2022-2373
simply schedule appointments
wordpress plugin
cve-2022-2373
authorisation vulnerability
rest endpoint
unauthenticated users
user details
name
email address
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.003
Percentile
69.3%
The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address
Affected configurations
Node
nsquasimply_schedule_appointmentsRange<1.5.7.7wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| nsqua | simply_schedule_appointments | * | cpe:2.3:a:nsqua:simply_schedule_appointments:*:*:*:*:*:wordpress:*:* |
Related
nuclei
nuclei
WordPress Simply Schedule Appointments <1.5.7.7 - Information Disclosure
2022-11-09 14:43:06
patchstack
patchstack
wpexploit
wpexploit
cvelist
cvelist
cve
cve
CVE-2022-2373
2022-08-29 18:15:09
prion
prion
Authentication flaw
2022-08-29 18:15:00
wpvulndb
wpvulndb
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.003
Percentile
69.3%
Related for NVD:CVE-2022-2373