Skip to content
Not rated

CVE-2022-1761 The Peter’s Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to missing nonce checks

Description

The Peter’s Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to missing nonce checks. This allows the change of its settings, which can be used to lower the required user level, change texts, the used email address and more.

Affected products and versions

Product Affected versions Fixed in
Peter’s Collaboration E-mails 2.2.0 No fix stated
Track this CVE