| |
Vulnerability CVE-2022-2377
Published: 2022-08-22
| Description: |
The Directorist WordPress plugin before 7.3.0 does not have authorisation and CSRF checks in an AJAX action, allowing any authenticated users to send arbitrary emails on behalf of the blog |
Type:
CWE-352 (Cross-Site Request Forgery (CSRF))
References: |
https://wpscan.com/vulnerability/f4e606e9-0664-42fb-a59b-21de306eb530
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
