PT-2022-24882 · WordPress · Directorist

Cydave · Published 2022-12-12 · Updated 2025-04-22 · CVE-2022-3930

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Directorist WordPress plugin versions prior to 7.4.2.2

Description The issue allows an attacker to exploit an IDOR vulnerability, enabling them to change the password of arbitrary users instead of their own.

Recommendations For Directorist WordPress plugin versions prior to 7.4.2.2, update to version 7.4.2.2 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2022-3930

OPENSUSE-SU-2024:12531-1

Affected Products

Directorist

References · 7

• 🔥 https://wpscan.com/vulnerability/8728d02a-51db-4447-a843-0264b6ceb413 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:12531-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-3930 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3930 · Security Note
• https://suse.com/security/cve/CVE-2022-39307 · Note
• https://suse.com/security/cve/CVE-2022-3930 · Note
• https://t.me/cvenotify/119426 · Telegram Post