medium5.3
CVE-2022-4417
The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 9.3.3 does not properly block access to the REST API users endpoint when the blog is i…
Impact
The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 9.3.3 does not properly block access to the REST API users endpoint when the blog is in a subdirectory, which could allow attackers to bypass the restriction in place and list users
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cerber | Wp Cerber Security\, Anti-Spam \& Malware Scan | before 9.3.3 |