CVE-2022-3961

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

The Directorist WordPress plugin before 7.4.4 does not prevent users with low privileges (like subscribers) from accessing sensitive system information.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published: Dec 19, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-39624.3A content spoofing vulnerability was found in Kiali. It was discovered that Kiali does not implement error handling when the page or endpoin CVE-2022-39635.4A vulnerability was found in gnuboard5. It has been classified as problematic. Affected is an unknown function of the file bbs/faq.php of th CVE-2022-39648.1A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the com CVE-2022-39658.1A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function smc_encode_stream of the file libavco CVE-2022-39667.5A vulnerability, which was classified as critical, has been found in Ultimate Member Plugin up to 2.5.0. This issue affects the function loa CVE-2022-39677.8A vulnerability, which was classified as critical, was found in Vesta Control Panel. Affected is an unknown function of the file func/main.s CVE-2022-39686.1A vulnerability has been found in emlog and classified as problematic. Affected by this vulnerability is an unknown functionality of the fil CVE-2022-39695.5A vulnerability was found in OpenKM up to 6.3.11 and classified as problematic. Affected by this issue is the function getFileExtension of t CVE-2022-39708.8A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/CVE-2022-39715.6A vulnerability was found in matrix-appservice-irc up to 0.35.1. It has been declared as critical. This vulnerability affects unknown code o CVE-2022-39729.8A vulnerability was found in Pingkon HMS-PHP. It has been rated as critical. This issue affects some unknown processing of the file admin/ad CVE-2022-39739.8A vulnerability classified as critical has been found in Pingkon HMS-PHP. Affected is an unknown function of the file /admin/admin.php of th