WordPress MailPoet Newsletters Plugin <= 2.6.10 - CSRF

2014-05-2700:00:00

Yoshinori Matsumoto

patchstack.com

0.002 Low

EPSS

Percentile

52.5%

Because of this vulnerability, the attackers can hijack the authentication of arbitrary users.

Solution

           Update the plugin.

CPENameOperatorVersion
mailpoet newslettersle2.6.10

CPE	Name	Operator	Version
	mailpoet newsletters	le	2.6.10

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3907

0.002 Low

EPSS

Percentile

52.5%

Related for PATCHSTACK:AC76AA6E5E0130625B0722FB89A6E0D5