CVE-2022-2377CWE-352CWE-862

CVE-2022-2377: falha em Directorist – WordPress Business Directory…

Directorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Directorist – WordPress Business Directory Plugin with Classified Ads Listings

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.4%
The Directorist WordPress plugin before 7.3.0 does not have authorisation and CSRF checks in an AJAX action, allowing any authenticated users to send arbitrary emails on behalf of the blog
Produtos afetados
Unknown · Directorist – WordPress Business Directory Plugin with Classified Ads Listings
CVEs relacionadas — Directorist – WordPress Business Directory…

No mesmo produto, das mais perigosas para as menos.

CVE-2022-2376—Directorist < 7.3.1 - Unauthenticated Email Address DisclosureEPSS 2.0%CVE-2022-2046—Directorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File UploadEPSS 1.0%