Description
The Directorist WordPress plugin before 7.4.4 does not prevent users with low privileges (like subscribers) from accessing sensitive system information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Directorist | < 7.4.4 | 7.4.4 |
References
- https://wpscan.com/vulnerability/6aad6454-de1b-4304-9c14-05e28d08b253 exploit vdb-entry technical-description