← CVE Intelligence

CVE-2022-2373

Simply Schedule Appointments < 1.5.7.7 - Unauthenticated Email Address Disclosure PUBLISHED

Description (CNA)

The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address

Affected (CNA)

Vendor / productVersions
Unknown / Simply Schedule Appointments – WordPress Booking Pluginaffected 1.5.7.7 before 1.5.7.7

CWE

CWE-862

References

ADP enrichment

CVE

No English description supplied.