2 matches found
HTML Email Template Designer < 3.1 - Missing Authorization on Rest Route Detection
The WP HTML Mail WordPress plugin is vulnerable to unauthorized access which allows unauthenticated attackers to retrieve and modify theme settings due to a missing capability check on the /themesettings REST-API endpoint found in the /includes/class-template-designer.php file, in versions up to...
8.3CVSS6.6AI score0.66406EPSS
SaveExploits4References6
Design/Logic Flaw
The WP HTML Mail WordPress plugin is vulnerable to unauthorized access which allows unauthenticated attackers to retrieve and modify theme settings due to a missing capability check on the /themesettings REST-API endpoint found in the /includes/class-template-designer.php file, in versions up to...
4.3CVSS6.2AI score0.66406EPSS
SaveExploits4References2Affected Software1
20