Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-08364
HistoryJan 23, 2022 - 12:00 a.m.

WordPress Email Tracker plugin cross-site request forgery vulnerability

2022-01-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.001 Low

EPSS

Percentile

21.6%

WordPress is the WordPress Foundation’s set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL.A cross-site request forgery vulnerability exists in the WordPress Email Tracker plugin, which stems from a WEB application that does not adequately verify that requests are coming from trusted users. An attacker could exploit the vulnerability to send an unintended request to the server via the affected client.

CPENameOperatorVersion
wordpress email tracker pluginle5.2.6

0.001 Low

EPSS

Percentile

21.6%