Skip to content
Sign in
Not rated

CVE-2021-24916 The Qubely WordPress plugin before 1.8.6 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses…

Description

The Qubely WordPress plugin before 1.8.6 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses via the qubely_send_form_data AJAX action.

Affected products and versions

Product Affected versions Fixed in
Qubely 1.8 earliest → < 1.8.6 1.8.6

Other CVEs of Qubely

The 2 CVEs of Qubely →
CVE-2023-0376 The Qubely WordPress plugin before 1.8.5 does not validate and escape some of its block options before outputting them… 5.4 Medium
Track this CVE