Directorist by wpWax – Lana Codes

Directorist by wpWax <= 7.4.3 - Subscriber+ Sensitive Information Disclosure

LANACOMMONVDB ID: df9b5e00-c059-4b91-8f04-8e4bed99280e

The plugin does not prevent users with low privileges (like subscribers) from accessing sensitive system information.

You must be log in to view vulnerability details.

Or register a new account.

References

Source Code: https://wordpress.org/plugins/directorist/

CVE: CVE-2022-3961

Attributes

Catgory: WordPress Plugin

Discovered: 2022-11-07

Published: 2022-11-28

Affected Version: <= 7.4.3

Classification

Type: Missing Authorization

Researcher

Name: István Márton

Email: [email protected]

Support Us?

We would truly appreciate it if you bought us a bunny (food for a snow leopard).