Directorist – WordPress Business Directory Plugin with Classified Ads Listings, CVE-2022-2377

CVE, Research URL: CVE-2022-2377
Home page URL: Security reports for Directorist – WordPress Business Directory Plugin with Classified Ads Listings
Application: Directorist – WordPress Business Directory Plugin with Classified Ads Listings
Published on: Aug 22, 2022
Research Description: The Directorist WordPress plugin before 7.3.0 does not have authorisation and CSRF checks in an AJAX action, allowing any authenticated users to send arbitrary emails on behalf of the blog
Affected versions: max 7.3.0.
Status: vulnerable

Directorist &#8211; WordPress Business Directory Plugin with Classified Ads Listings, CVE-2022-2377