Lucene search

K
cvelistMitreCVELIST:CVE-2017-6955
HistoryMar 17, 2017 - 8:55 a.m.

CVE-2017-6955

2017-03-1708:55:00
mitre
www.cve.org

5.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.0%

An issue was discovered in by-email/by-email.php in the Invite Anyone plugin before 1.3.15 for WordPress. A user is able to change the subject and the body of the invitation mail that should be immutable, which facilitates a social engineering attack.

5.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.0%

Related for CVELIST:CVE-2017-6955