CVE-2022-2379

The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in its REST API, allowing unauthenticated users to retrieve information related to the courses, exams, departments as well as student's grades and PII such as email address, physical address, phone number etc

Score

CVSS 3.1 7.5 High

Status

Modified - contact@wpscan.com

Published

2022-08-15

Last modified

2024-08-03

Weaknesses

CWE-862

Affected products

• Easy Student Results (Easy Student Results Project)
• Easy Student Results (Unknown)

References

• https://wpscan.com/vulnerability/0773ba24-212e-41d5-9ae0-1416ea2c9db6