5.3
Moyenne
CVE-2026-105322 The Magee Shortcodes WordPress plugin through 2.1.1 does not restrict the recipient of some of its unauthenticated…
Description
The Magee Shortcodes WordPress plugin through 2.1.1 does not restrict the recipient of some of its unauthenticated contact-form actions, allowing unauthenticated users to send arbitrary emails to any address through the site (mail relay).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Magee Shortcodes 2.1 | premières → 2.1.1 | Pas de correctif indiqué |