The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to change the password of arbitrary users instead of his own.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Directorist | Wpwax | * | 7.4.2.2 (excluding) |
References
