CVE-2022-1186
Assigner: Wordfence
Published: 2022-04-19T20:26:38
State: PUBLISHED
affected: vendor: bepopiacompliant
product: Be POPIA Compliant
versions: version: *
status: affected
lessThanOrEqual: 1.1.5
versionType: semver
defaultStatus: unaffected
descriptions: value: The WordPress plugin Be POPIA Compliant exposed sensitive information to unauthenticated users consisting of site visitors emails and usernames via an API route, in versions up to an including 1.1.5.
problemTypes: descriptions: description: CWE-200 Information Exposure
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
baseScore: 5.3
baseSeverity: MEDIUM
credits: type: finder
value: Chris Meistre
timeline: time: 2022-03-30T00:00:00.000+00:00
value: Disclosed