Lucene search
Krzysztof ZającWPEX-ID:437C4330-376A-4392-86C6-C4C7ED9583ADHistoryAug 10, 2022 - 12:00 a.m.
Directorist < 7.3.1 - Unauthenticated Email Address Disclosure
2022-08-1000:00:00
Krzysztof Zając
133
directorist
email disclosure
unauthenticated access
EPSS
0.037
Percentile
91.8%
The plugin discloses the email address of all users in an AJAX action available to both unauthenticated and any authenticated users
https://example.com/wp-admin/admin-ajax.php?action=directorist_author_paginationRelated
cve
cve
CVE-2022-2376
2022-09-05 13:15:08
nuclei
nuclei
WordPress Directorist <7.3.1 - Information Disclosure
2022-09-06 08:57:31
cvelist
cvelist
CVE-2022-2376 Directorist < 7.3.1 - Unauthenticated Email Address Disclosure
2022-09-05 12:35:19
patchstack
patchstack
wpvulndb
wpvulndb
Directorist < 7.3.1 - Unauthenticated Email Address Disclosure
2022-08-10 00:00:00
nvd
nvd
CVE-2022-2376
2022-09-05 13:15:08
prion
prion
Code injection
2022-09-05 13:15:00