7 matches found
CVE-2026-13156
CVE-2026-13156 — MailerSend公式SMTP統合プラグイン !IMPORTANT 概要: WordPress用公式 MailerSend SMTP統合プラグイン （ 1.0.8）において、高深刻度のクロスサイト・リクエスト・フォージェリ（CSRF ）脆弱性（CVE-2026-13156）が発見されました。設定削除ハンドラ mailersendhandleconfigurationdelete...
CVE-2026-13156
The MailerSend WordPress plugin before 1.0.8 does not perform a nonce check on its configuration-delete action it verifies the manageoptions capability but ignores the nonce, so an attacker can trick a logged-in administrator into visiting a crafted page that wipes the MailerSend WordPress plugin...
CVE-2026-13156
The MailerSend WordPress plugin before 1.0.8 does not perform a nonce check on its configuration-delete action it verifies the manageoptions capability but ignores the nonce, so an attacker can trick a logged-in administrator into visiting a crafted page that wipes the MailerSend WordPress plugin...
EUVD-2026-45890
The MailerSend WordPress plugin before 1.0.8 does not perform a nonce check on its configuration-delete action it verifies the manageoptions capability but ignores the nonce, so an attacker can trick a logged-in administrator into visiting a crafted page that wipes the MailerSend WordPress plugin...
CVE-2026-13156
The CVE concerns the MailerSend WordPress plugin (before version 1.0.8). The root cause is lack of nonce validation on the configuration-delete action, while a capability check (manage_options) is performed. This CSRF-like flaw enables a logged-in administrator to be tricked into visiting a craft...
