Description (CNA)
The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 9.3.3 does not properly block access to the REST API users endpoint when the blog is in a subdirectory, which could allow attackers to bypass the restriction in place and list users
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / WP Cerber Security, Anti-spam & Malware Scan | affected 0 before 9.3.3 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.