The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapi_get_wp_users AJAX action, allowing any authenticated users, such as subscriber to download the list of email addresses registered on the blog
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2022-03-07T08:16:29
Updated: 2024-08-02T23:25:40.210Z
Reserved: 2022-01-26T00:00:00
Link: CVE-2022-0384
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2022-03-07T09:15:09.193
Modified: 2023-08-02T16:53:38.630
Link: CVE-2022-0384
Redhat
No data.