PT-2022-14161

Name of the Vulnerable Software and Affected Versions MailPress WordPress plugin versions prior to 7.2.2 Description The issue concerns the lack of CSRF checks in various parts of the plugin, which could allow attackers to perform actions such as changing settings or purging log files by tricking...

MailPress <= 7.2.1 - Arbitrary Settings Update & Log Files Purge via CSRF

The plugin does not have CSRF checks in various places, which could allow attackers to make a logged in admin change the settings, purge log files and more via CSRF attacks PoC...

MailPress <= 7.2.1 - Arbitrary Settings Update & Log Files Purge via CSRF

The plugin does not have CSRF checks in various places, which could allow attackers to make a logged in admin change the settings, purge log files and more via CSRF attacks document.getElementById"test".submit; input type="text" name="connectionsmtppasswo...

WordPress-Mailpress action.php a remote code execution vulnerability

Details source: Heavenly lab Description Mailpress is one of the more popular mail plugin. Plugin Directory: https://wordpress.org/plugins/mailpress/ Official website: http://blog.mailpress.org This vulnerability has been in the 2016 06 on 21 may communicate the information to wordpress. 0x01...