Non notée
CVE-2023-3179 The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could…
Description
The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the manage_postman_smtp capability resend an email to an arbitrary address (for example a password reset email could be resent to an attacker controlled email, and allow them to take over an account).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| POST SMTP Mailer 2.5 | 2.5.0 → < 2.5.7 | 2.5.7 |
Autres CVE de POST SMTP Mailer
Les 4 CVE de POST SMTP Mailer →
CVE-2023-3178
The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could…
4.3
Moyenne
CVE-2023-6620
The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using…
7.2
Élevée
CVE-2023-5958
The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the…
Non notée