6.5
Moyenne
CVE-2022-3930 The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to…
Description
The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to change the password of arbitrary users instead of his own.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Directorist 7.4 | premières → < 7.4.2.2 | 7.4.2.2 |