CVE

CVE-2022-2376

CVE-2022-2376

The Directorist WordPress plugin before 7.3.1 discloses the email address of all users in an AJAX action available to both unauthenticated and any authenticated users

Source: CVE-2022-2376

Exit mobile version