The WP-EMail WordPress plugin before 2.69.0 does not protect its log deletion functionality with nonce checks, allowing attacker to make a logged in admin delete logs via a CSRF attack
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/178d0c49-3a93-4948-8734-f3d7518361b3 | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: WPScan
Published: 2022-06-20T10:25:56
Updated: 2022-06-20T10:25:56
Reserved: 2022-05-09T00:00:00
Link: CVE-2022-1630
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-06-20T11:15:09.580
Modified: 2022-06-28T17:43:06.357
Link: CVE-2022-1630
JSON object: View
Redhat Information
No data.
CWE