CVE-2022-43504
Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to obtain the email address of the user who posted a blog using the WordPress Post by Email Feature.
Date published : 2022-12-04
https://jvn.jp/en/jp/JVN09409909/index.html