CVE-2022-4417

CVE-2022-4417 describes a vulnerability in the WP Cerber Security, Anti-spam & Malware Scan WordPress plugin prior to version 9.3.3. This flaw allows attackers to bypass REST API restrictions and enumerate users when the WordPress blog is installed in a subdirectory. The vulnerability has a CVSS score of 5.3 (Medium), indicating a low attack complexity and no required privileges or user interaction. An unauthenticated attacker can remotely exploit this to gain access to user lists, resulting in a low impact on confidentiality. There is currently no evidence of active exploitation, nor are there publicly available exploit modules or proof-of-concept code. The vulnerability has received minimal community discussion and media coverage, suggesting a low level of public awareness.