CVE-2021-4422

The POST SMTP Mailer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.20. This is due to missing or incorrect nonce validation on the handleCsvExport function. This makes it possible for unauthenticated attackers to trigger a CSV export via a...

CVE-2021-4422

The POST SMTP Mailer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.20. This is due to missing or incorrect nonce validation on the handleCsvExport function. This makes it possible for unauthenticated attackers to trigger a CSV export via a...

CVE-2021-4422 POST SMTP Mailer <= 2.0.20 - Cross-Site Request Forgery Bypass

The POST SMTP Mailer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.20. This is due to missing or incorrect nonce validation on the handleCsvExport function. This makes it possible for unauthenticated attackers to trigger a CSV export via a...

CVE-2021-4422

The CVE-2021-4422 entry concerns the WordPress POST SMTP Mailer plugin (

CVE-2021-4422

creationtimestamp| type| source ---|---|--- 2021-12-14 11:04:35+00:00| seen| https://t.me/NeKaspersky/1550 2022-01-11 12:34:11+00:00| exploited| https://t.me/BleepingComputer/11313 2023-07-12 12:35:39+00:00| seen| https://t.me/cibsecurity/66474 2024-10-21 16:08:53+00:00| seen|...