← Database

CVE-2022-2373

MEDIUM CVSS: 5.3 Published: 2022-08-29 Modified: 2026-06-17

Description

The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address

Affected Platforms

Nsqua Simply Schedule Appointments

Weakness Type

CWE-862, CWE-862

References