CVE-2022-3930

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to change the password of arbitrary users instead of his own.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected software

No affected versions have been published.

Timeline

Published
Dec 12, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-393008.1node SAML is a SAML 2.0 library based on the SAML implementation of passport-saml. A remote attacker may be able to bypass SAML authenticatiCVE-2022-393015.4sra-admin is a background rights management system that separates the front and back end. sra-admin version 1.1.1 has a storage cross-site sCVE-2022-393025.4Ree6 is a moderation bot. This vulnerability would allow other server owners to create configurations such as "Better-Audit-Logging" which cCVE-2022-393039.8Ree6 is a moderation bot. This vulnerability allows manipulation of SQL queries. This issue has been patched in version 1.7.0 by using JavasCVE-2022-393044.7ghinstallation provides transport, which implements http.RoundTripper to provide authentication as an installation for GitHub Apps. In ghinsCVE-2022-393059.8Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Versions prior toCVE-2022-393068.1Grafana is an open-source platform for monitoring and observability. Versions prior to 9.2.4, or 8.5.15 on the 8.X branch, are subject to ImCVE-2022-393075.3Grafana is an open-source platform for monitoring and observability. When using the forget password on the login page, a POST request is madCVE-2022-393085.9GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your prCVE-2022-393096.5GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your prCVE-2022-393106.5GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your prCVE-2022-393118.8GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your pr
CVE-2022-3930: Medium severity, CVSS 6.5 | Vulnix