← voltar
CVE-2022-2376

Directorist < 7.3.1 - Unauthenticated Email Address Disclosure

EPSS 1.4%CWE-862
The Directorist WordPress plugin before 7.3.1 discloses the email address of all users in an AJAX action available to both unauthenticated and any authenticated users

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →