← CVE Intelligence

CVE-2022-3930

Directorist < 7.4.2.2 - Subscriber+ Arbitrary User Password Update via IDOR PUBLISHED

Description (CNA)

The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to change the password of arbitrary users instead of his own.

Affected (CNA)

Vendor / productVersions
Unknown / Directoristaffected 0 before 7.4.2.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.