6 matches found
CVE-2023-6042
Any unauthenticated user may send e-mail from the site with any title or content to the admin...
7.5CVSS6.9AI score0.00563EPSS
SaveExploits2
CVE-2023-6042
Any unauthenticated user may send e-mail from the site with any title or content to the admin...
7.5CVSS7AI score0.00563EPSS
SaveExploits2References1
CVE-2023-6042
CVE-2023-6042 affects Getwid (a WordPress plugin) with versions prior to 2.0.3. The vulnerability allows any unauthenticated user to trigger the site to send an email to the administrator with arbitrary headers/content, through the WordPress admin-ajax endpoint (action=getwid_send_mail). PoCs and...
7.5CVSS7.5AI score0.00563EPSS
SaveExploits2References1Affected Software1
CVE-2023-6042 Getwid < 2.0.3 - Unauthenticated Arbitrary Email Sending to Admin
Any unauthenticated user may send e-mail from the site with any title or content to the admin...
7.8AI score0.00563EPSS
SaveExploits2References1
20