Threats tagged 'ghsa-7fjq-qqj3-wh4h'

A vulnerability in The Directorist WordPress plugin before version 8.11 allows an administrator of one site in a multisite network to perform email-verification bulk actions on users of other sites without proper permission checks. This can result in locking out users, including the network Super Administrator, until they re-verify their email addresses.