← Back to CVE List
CVE-2022-2376
The Directorist WordPress plugin before 7.3.1 discloses the email address of all users in an AJAX action available to both unauthenticated and any authenticated users
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt