← Database

CVE-2022-3930

MEDIUM CVSS: 6.5 Published: 2022-12-12 Modified: 2026-06-17

Description

The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to change the password of arbitrary users instead of his own.

Affected Platforms

Wpwax Directorist

Weakness Type

Unknown

References