CVE-2022-2373

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Aug 29, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-237309.8The public API error causes for the attacker to be able to bypass API access control.CVE-2022-237317.8V8 javascript engine (heap vulnerability) can cause privilege escalation ,which can impact on some webOS TV models.CVE-2022-237328.8A path traversal vulnerability was identified in GitHub Enterprise Server management console that allowed the bypass of CSRF protections. ThCVE-2022-237335.4A stored XSS vulnerability was identified in GitHub Enterprise Server that allowed the injection of arbitrary attributes. This injection wasCVE-2022-237348.8A deserialization of untrusted data vulnerability was identified in GitHub Enterprise Server that could potentially lead to remote code execCVE-2022-237376.5An improper privilege management vulnerability was identified in GitHub Enterprise Server that allowed users with improper privileges to creCVE-2022-237385.7An improper cache key vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to access private repositoCVE-2022-237399.8An incorrect authorization vulnerability was identified in GitHub Enterprise Server, allowing for escalation of privileges in GraphQL API reCVE-2022-23744.8The Simply Schedule Appointments WordPress plugin before 1.5.7.7 does not sanitise and escape some of its settings, which could allow high pCVE-2022-237408.8CRITICAL: An improper neutralization of argument delimiters in a command vulnerability was identified in GitHub Enterprise Server that enablCVE-2022-237417.2An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a scoped user-to-server token to escalate tCVE-2022-237427.8Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low pri