WordPress Qubely < 1.8.6 - Unauthenticated Email Sending

Qubely WordPress plugin 1.8.6 contains an insecure deserialization caused by unauthenticated users being able to send arbitrary emails via the qubelysendformdata AJAX action, letting attackers send spam or malicious emails, exploit requires no authentication. id: CVE-2021-24916 info: name:...

Frontend File Manager Plugin <= 23.5 - Unauthenticated Arbitrary Email Sending

Frontend File Manager Plugin WordPress plugin through 23.5 contains an open relay and unauthorized file access vulnerability caused by lack of authentication and security checks, letting unauthenticated attackers send emails and access files, exploit requires no authentication. id: CVE-2026-0829...

CVE-2026-37073

CVE-2026-37073 Veno File Manager Project 4.4.9 の /vfm-admin/ajax/sendfiles.php における不適切なアクセス制御により、認証されていない攻撃者が、必要なパラメータとヘッダーを付けてエンドポイントに POST リクエストを送信することで、アプリケーション上で設定された SMPT サーバーからメールを送信することが可能です。...

CVE-2023-23397-PoC

CVE-2023-23397-PoC C送信専用バージョンの CVE-2023-23397-POC-Powershell by Oddvar Moe @oddvarmoe 作 Outlookアカウントに関連付けられたアドレスからメールを送信します。 root@kitploit: .\CVE202323397.exe --help CVE202323397 1.0.0.0 Copyright c 2023 -t, --to Required. Recipient email address -p, --path Required. UNC Path -s, --subject Messag...

CVE-2026-87074

The Forminator Forms WordPress plugin (versions 1.17.1 through 1.57.2.0 ) is vulnerable to unauthenticated arbitrary recipient email sending. The root cause is a failure to bind saved-draft notifications to the original visitor, allowing the plugin to accept the recipient address and message link...

CVE-2026-87074 Forminator Forms < 1.57.2.1 - Unauthenticated Arbitrary Recipient Email Sending with Attacker-Controlled Link

The Forminator Forms WordPress plugin before 1.57.2.1 does not bind its saved-draft notification to the visitor who created the draft, and takes both the recipient address and the link written into the message from the request, so unauthenticated visitors can make the site send a message from its...

WordPress Forminator Forms plugin 1.17.1-1.57.2.0 - Unauthenticated Arbitrary Recipient Email Sending with Attacker-Controlled Link vulnerability

Unauthenticated Arbitrary Recipient Email Sending with Attacker-Controlled Link vulnerability discovered by vuxvinh in WordPress Plugin Forminator versions 1.17.1-1.57.2.0...

SOGo_web_mail-vulnerability-CVE-2025-50340

CVE-2025-50340: SOGo Webmail における安全でない直接オブジェクト参照 IDOR 脆弱性 CVE ID: CVE-2025-50340 報告者: Milad Seddigh 製品: SOGo 影響を受けるバージョン: v5.6.0 影響: 安全でない直接オブジェクト参照 IDOR 脆弱性 → ユーザーが別のユーザーに代わって電子メールを送信できるようにします。 概要 SOGo Webmail で、安全でない直接オブジェクト参照 IDOR の脆弱性が発見され、 認証済みユーザーが、電子メール送信リクエスト内のユーザー制御識別子を操作することで、...

CVE-2018-8718

エクスプロイトタイトル : Jenkins mailerプラグイン CSRF脆弱性 - CSRFメール送信 日付 : 2018/06/05 エクスプロイト作成者 : Yeom Geun Cheol ベンダーホームページ : https://jenkins.io/ ソフトウェアリンク : https://updates.jenkins.io/download/plugins/mailer/1.20/mailer.hpi バージョン : バージョン1.20未満 1.1 1.20 テスト環境 : Linux , Windows CVE : CVE–2018-8718...

WordPress WPFunnels plugin < 3.13.0 - Unauthenticated Arbitrary Recipient Email Sending vulnerability

Unauthenticated Arbitrary Recipient Email Sending vulnerability discovered by Sai Praneeth Koti in WordPress Plugin WPFunnels versions 3.13.0...

CVE-2026-79632

The WPFunnels WordPress plugin before 3.13.0 does not perform any authorisation or nonce check in one of its opt-in submission handlers, and takes the notification recipients and subject from the request, allowing unauthenticated users to make the site send emails to arbitrary recipients with an...

PT-2026-85416

The WPFunnels WordPress plugin before 3.13.0 does not perform any authorisation or nonce check in one of its opt-in submission handlers, and takes the notification recipients and subject from the request, allowing unauthenticated users to make the site send emails to arbitrary recipients with an...

CVE-2026-17520

The Newsletters WordPress plugin before 4.17 does not generate its API key using a sufficiently random source, deriving it from a publicly known value, allowing unauthenticated attackers to compute the key and perform privileged actions such as adding and deleting subscribers and sending emails,...

CVE-2026-17520

The Newsletters WordPress plugin before 4.17 does not generate its API key using a sufficiently random source, deriving it from a publicly known value, allowing unauthenticated attackers to compute the key and perform privileged actions such as adding and deleting subscribers and sending emails,...

CVE-2026-37073

Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to send emails from the configured SMPT server on the application via making a POST request to the endpoint with needed parameters and header...

PT-2026-79813

NewSiteServer NSS developed by CyberTutor has a Missing Authentication vulnerability. Unauthenticated remote attackers can exploit a specific functionality to send emails to anyone on behalf of the school...

CVE-2026-16269

The Newsletters WordPress plugin (versions prior to 4.16 ) contains an authentication bypass vulnerability when the optional API is enabled. The root cause is a failure to strictly compare the API authentication key , which allows unauthenticated attackers to leverage type juggling to bypass secu...

CVE-2026-16269

The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key, allowing unauthenticated attackers to bypass the API authentication via type juggling and perform privileged actions such as modifying subscriber records and sending emails, when the optional API ha...

CVE-2026-16774

The Chatbot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.5.9 via the wpcssendemail AJAX handler. This is due to the wpcssendemail function being registered on both wpajaxwpcssendemail and wpajaxnoprivwpcssendemail with no nonce verification,...

PYSEC-2026-1297 Django allows enumeration of user e-mail addresses

An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome only...