CVE-2021-4422

🗓️ 12 Jul 2023 06:52:35Reported by WordfenceType

The POST SMTP Mailer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.20. Due to missing or incorrect nonce validation on the handleCsvExport() function, unauthenticated attackers can trigger a CSV export via a forged request

Reporter	Title	Published	Views	Family All 11
IBM Security Bulletins	Security Bulletin: Apache Log4j vulnerability (CVE-2021-4422) addressed in IBM Watson Machine Learning Accelerator	29 Apr 202502:13	–	ibm
Circl	CVE-2021-4422	14 Dec 202111:04	–	circl
CNNVD	WordPress Plugin POST SMTP Mailer 跨站请求伪造漏洞	12 Jul 202300:00	–	cnnvd
Cvelist	CVE-2021-4422 POST SMTP Mailer <= 2.0.20 - Cross-Site Request Forgery Bypass	12 Jul 202306:52	–	cvelist
EUVD	EUVD-2021-34249	3 Oct 202520:07	–	euvd
NVD	CVE-2021-4422	12 Jul 202307:15	–	nvd
OpenVAS	WordPress Post SMTP Mailer/Email Log Plugin < 2.0.21 CSRF Vulnerability	20 Jul 202300:00	–	openvas
Prion	Cross site request forgery (csrf)	12 Jul 202307:15	–	prion
Positive Technologies	PT-2021-24067 · WordPress · Post Smtp Mailer	14 Dec 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-4422	22 May 202520:50	–	redhatcve

NVD

Vulners

Node

wpexperts post_smtpRange≤2.0.20wordpress

[
  {
    "vendor": "saadiqbal",
    "product": "Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.0.20",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-4/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-1/
blog	www.blog.nintechnet.com/more-wordpress-plugins-and-themes-vulnerable-to-csrf-attacks/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-5/
plugins	www.plugins.trac.wordpress.org/changeset
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-2/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/e018ca7c-06dd-4d40-91d4-4ed188b8aaf2
blog	www.blog.nintechnet.com/25-wordpress-plugins-vulnerable-to-csrf-attacks/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-3/

08 Apr 2026 19:17Current

4.5Medium risk

Vulners AI Score4.5

CVSS 3.14.3

EPSS0.00313

SSVC

CWE-352