Co-Authors Plus, 034cb5664dd2496536a4b1eb1b6eccfe0dfdee1d

CVE, Research URL: 034cb5664dd2496536a4b1eb1b6eccfe0dfdee1d
Home page URL: Security reports for Co-Authors Plus
Application: Co-Authors Plus
Published on: Jun 07, 2022
Research Description: Co-Authors Plus [co-authors-plus] < 3.5.2 Co-Authors Plus 3.5 - 3.5.1 - Sensitive Information Disclosure The Co-Authors Plus plugin for WordPress is vulnerable to sensitive information disclosure via the /wp/v2/coauthors REST API input in versions 3.5 and 3.5.1. This is due to insufficient capability checking that allows unauthorized users to access the endpoint and retrieve guest authors email addresses.
Affected versions: max 3.5.2.
Status: vulnerable