CVE-2024-8664

🗓️ 13 Sep 2024 06:47:28Reported by WordfenceType

The WP Test Email plugin is vulnerable to Reflected Cross-Site Scriptin

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-8664	13 Sep 202409:35	–	circl
CNNVD	WordPress plugin WP Test Email 跨站脚本漏洞	13 Sep 202400:00	–	cnnvd
Cvelist	CVE-2024-8664 WP Test Email <= 1.1.7 - Reflected Cross-Site Scripting	13 Sep 202406:47	–	cvelist
EUVD	EUVD-2024-49334	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8664	13 Sep 202407:15	–	nvd
OSV	CVE-2024-8664	13 Sep 202407:15	–	osv
Patchstack	WordPress WP Test Email Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)	13 Sep 202400:00	–	patchstack
Patchstack	WordPress WP Test Email plugin <= 1.1.7 - Reflected Cross-Site Scripting vulnerability	13 Sep 202406:07	–	patchstack
Positive Technologies	PT-2024-39162 · WordPress · Wp Test Email	13 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-8664	23 May 202507:23	–	redhatcve

NVD

Vulners

Node

boopathirajan wp_test_emailRange<1.1.8wordpress

[
  {
    "vendor": "boopathi0001",
    "product": "WP Test Email",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.1.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/70c1ee04-cfb1-4819-95ab-497e814da16f
plugins	www.plugins.trac.wordpress.org/browser/wp-test-email/tags/1.1.7/wp-test-email.php

08 Apr 2026 17:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.1

EPSS0.02784

SSVC

CWE-79