CVE-2022-2379

nvd nist nuclei

Published: Aug 15, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in its REST API, allowing unauthenticated users to retrieve information related to the courses, exams, departments as well as student's grades and PII such as email address, physical address, phone number etc

Affected (1)

Products: Easy Student Results Project: Easy Student Results

Easy Student Results Project

1 product

Easy Student Results

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Easy Student Results Project Easy Student Results	Up to 2.2.8

Related CWEs

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (2)

https://wpscan.com/vulnerability/0773ba24-212e-41d5-9ae0-1416ea2c9db6

Source: contact@wpscan.com

ExploitThird Party Advisory

https://wpscan.com/vulnerability/0773ba24-212e-41d5-9ae0-1416ea2c9db6

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.