CVE-2024-12041: Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure
The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12 via the /wp-json/directorist/v1/users/ endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including including usernames, email addresses, names, and more information about users.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12041?
CVE-2024-12041 has been classified with a moderate severity due to information exposure risks.
How do I fix CVE-2024-12041?
To fix CVE-2024-12041, you should update the Directorist AI-Powered WordPress Business Directory Plugin to version 8.1 or higher.
What versions are affected by CVE-2024-12041?
CVE-2024-12041 affects all versions of the Directorist AI-Powered WordPress Business Directory Plugin up to and including 8.0.12.
What does CVE-2024-12041 exploit?
CVE-2024-12041 exploits the /wp-json/directorist/v1/users/ endpoint, allowing information exposure to unauthenticated attackers.
Who is affected by CVE-2024-12041?
All users of the Directorist AI-Powered WordPress Business Directory Plugin version 8.0.12 or earlier are potentially affected by CVE-2024-12041.