Skip to content
Sign in
6.5 Medium

CVE-2022-3930 The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to…

Description

The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to change the password of arbitrary users instead of his own.

Affected products and versions

Product Affected versions Fixed in
Directorist 7.4 earliest → < 7.4.2.2 7.4.2.2

Other CVEs of Directorist

The 3 CVEs of Directorist →
CVE-2023-2252 The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file… 2.7 Low CVE-2022-3961 The Directorist WordPress plugin before 7.4.4 does not prevent users with low privileges (like subscribers) from… 6.5 Medium
Track this CVE