CVEvulnerability
CVE-2022-2379
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-08-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-862
Description
The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in its REST API, allowing unauthenticated users to retrieve information related to the courses, exams, departments as well as student's grades and PII such as email address, physical address, phone number etc
Affected configurations
• easy student results project easy student results (<= 2.2.8)
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://wpscan.com/vulnerability/0773ba24-212e-41d5-9ae0-1416ea2c9db6 Exploit, Third Party Advisory
- https://wpscan.com/vulnerability/0773ba24-212e-41d5-9ae0-1416ea2c9db6 Exploit, Third Party Advisory