CVE-2023-7202

The Fatal Error Notify WordPress plugin versions prior to 1.5.3 are vulnerable to broken access control and CSRF due to a lack of authorization and CSRF checks in the test_error AJAX action. This flaw allows any authenticated user, such as a subscriber , to trigger the action and spam the adminis...

CVE-2023-7202: Cross-Site Request Forgery (CSRF)

The Fatal Error Notify WordPress plugin before 1.5.3 does not have authorisation and CSRF checks in its testerror AJAX action, allowing any authenticated users, such as subscriber to call it and spam the admin email address with error messages. The issue is also exploitable via CSRF...