CVE-2022-2352 Post SMTP < 2.1.7 - Admin+ Blind SSRF

2022-09-2612:35:32

CWE-918

WPScan

www.cve.org

cve-2022-2352

post smtp

blind ssrf

0.001 Low

EPSS

Percentile

43.1%

JSON

The Post SMTP Mailer/Email Log WordPress plugin before 2.1.7 does not have proper authorisation in some AJAX actions, which could allow high privilege users such as admin to perform blind SSRF on multisite installations for example.

CNA Affected

[
  {
    "product": "Post SMTP Mailer/Email Log",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "2.1.7",
        "status": "affected",
        "version": "2.1.7",
        "versionType": "custom"
      }
    ]
  }
]