The WP-EMail WordPress plugin before 2.69.0 does not protect its log deletion functionality with nonce checks, allowing attacker to make a logged in admin delete logs via a CSRF attack
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/178d0c49-3a93-4948-8734-f3d7518361b3 | Exploit Third Party Advisory |
Configurations
Information
Published : 2022-06-20 04:15
Updated : 2022-06-28 10:43
NVD link : CVE-2022-1630
Mitre link : CVE-2022-1630
JSON object : View
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
Products Affected
wp-email_project
- wp-email