Cross site request forgery (csrf)

2023-06-0702:15:00

PRIOn knowledge base

www.prio-n.com

cross site request forgery

html injection

phishing forms

wordpress

vulnerability

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.2%

JSON

The Email Templates plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.3. This makes it possible for attackers to present phishing forms or conduct cross-site request forgery attacks against site administrators.

CPENameOperatorVersion
email_templateslt1.3.1

CPE	Name	Operator	Version
	email_templates	lt	1.3.1

References

blog.nintechnet.com/multiple-wordpress-plugins-vulnerable-to-html-injection/

wordpress.org/plugins/email-templates/

www.wordfence.com/threat-intel/vulnerabilities/id/f5c449f1-4715-4033-b0a3-6a8ca968aabc?source=cve