Directorist WordPress Plugin Information Exposure Vulnerability

A vulnerability allowing information exposure has been identified in the Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings, affecting all versions through 8.0.12. The vulnerability exists in the '/wp-json/directorist/v1/users/' endpoint, where unauthenticated attackers can access sensitive user data such as usernames, email addresses, names, and additional user information.

Impact

Exploitation of this vulnerability allows for unauthorized access to private user information, including usernames, email addresses, and other personal details.

Remediation

Users can update to version 8.1 or a newer patched version to address this vulnerability.