Simply Schedule Appointments < 1.5.7.7 - Unauthenticated Email Address Disclosure
18Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 1.4%
probabilidade de exploração
1.4%top 30% das CVEs
exploração observada
nãonenhuma fonte reporta
The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address
Produtos afetados
Unknown · Simply Schedule Appointments – WordPress Booking Plugin