4.3
Medium
CVE-2023-3178 The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could…
Description
The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the manage_postman_smtp capability delete arbitrary logs via a CSRF attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| POST SMTP Mailer 2.5 | 2.5.0 → < 2.5.7 | 2.5.7 |
Other CVEs of POST SMTP Mailer
The 4 CVEs of POST SMTP Mailer →
CVE-2023-6620
The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using…
7.2
High
CVE-2023-5958
The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the…
Not rated
CVE-2023-3179
The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could…
Not rated