.. / CVE-2022-2376

• Info Disclosure
• Nuclei
• Web

Exploit for WordPress Directorist <7.3.1 - Information Disclosure (CVE-2022-2376)

Description:

WordPress Directorist plugin before 7.3.1 is susceptible to information disclosure. The plugin discloses the email address of all users in an AJAX action available to both unauthenticated and authenticated users.

Nuclei Template

View the template here CVE-2022-2376.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-2376.yaml

References: