EPSS
Percentile
64.8%
Cross-Site Request Forgery (CSRF) vulnerability discovered by Konan Nagashima in WordPress WP HTML Mail plugin (versions <= 3.0.6).
Update the WordPress WP HTML Mail plugin to the latest available version (at least 3.0.8).
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20779
jvn.jp/en/jp/JVN42880365/index.html
jvndb.jvn.jp/en/contents/2021/JVNDB-2021-000063.html
wordpress.org/plugins/wp-html-mail/#developers