Lucene search
PRIOn knowledge basePRION:CVE-2023-3179HistoryJul 17, 2023 - 2:15 p.m.
Cross site request forgery (csrf)
2023-07-1714:15:00
PRIOn knowledge base
www.prio-n.com
3
wordpress
csrf
vulnerability
post smtp mailer
ajax
email resend
nvd
The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the manage_postman_smtp capability resend an email to an arbitrary address (for example a password reset email could be resent to an attacker controlled email, and allow them to take over an account).
| CPE | Name | Operator | Version |
|---|---|---|---|
| post_smtp_mailer | lt | 2.5.7 |
Related
cvelist
cvelist
CVE-2023-3179 POST SMTP Mailer < 2.5.7 - Account Takeover via CSRF
2023-07-17 13:29:54
nvd
nvd
CVE-2023-3179
2023-07-17 14:15:10
openvas
openvas
WordPress Post SMTP Mailer/Email Log Plugin < 2.5.7 CSRF Vulnerability
2023-07-20 00:00:00
cve
cve
CVE-2023-3179
2023-07-17 14:15:10
wpvulndb
wpvulndb
POST SMTP Mailer < 2.5.7 - Account Takeover via CSRF
2023-06-26 00:00:00
wpexploit
wpexploit
POST SMTP Mailer < 2.5.7 - Account Takeover via CSRF
2023-06-26 00:00:00
wordfence
wordfence