CVE-2022-1761 Peter’s Collaboration E-mails <= 2.2.0 - Arbitrary Settings Update via CSRF

2022-06-1312:42:37

CWE-352

WPScan

www.cve.org

0.001 Low

EPSS

Percentile

26.3%

JSON

The Peter’s Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to missing nonce checks. This allows the change of its settings, which can be used to lower the required user level, change texts, the used email address and more.

CNA Affected

[
  {
    "product": "Peter’s Collaboration E-mails",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "2.2.0",
        "status": "affected",
        "version": "2.2.0",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/31b413e1-d4b5-463e-9910-37876881c062

0.001 Low

EPSS

Percentile

26.3%

JSON

Related for CVELIST:CVE-2022-1761