161 matches found
CVE-2023-3088
CVE-2023-3088 affects the WordPress plugin WP Mail Log (plugin for WP mail logging). The vulnerability is a Stored Cross-Site Scripting (XSS) via email contents in versions up to and including 1.1.1 , caused by insufficient input sanitization and output escaping . Attackers can be unauthenticated...
CVE-2023-3080
CVE-2023-3080: WP Mail Catcher for WordPress is vulnerable to unauthenticated Stored XSS via the email subject in versions up to 2.1.2 due to insufficient input sanitization and output escaping. Exploitation would occur when an affected admin page is loaded. A fix is available in version 2.1.3. C...
WordPress Plugin WP Mail Catcher 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
PT-2023-22989 · WordPress · Wp Mail Logging
Name of the Vulnerable Software and Affected Versions: WP Mail Logging plugin for WordPress versions up to and including 1.11.1 Description: The issue is related to Stored Cross-Site Scripting via email contents due to insufficient input sanitization and output escaping. This allows unauthenticat...
WP Mail Log < 1.1.2 - Unauthenticated Stored Cross-Site Scripting
The plugin does not properly sanitize and escape email contents, leading to a potential Stored Cross-Site Scripting vulnerability. This issue allows for arbitrary web scripts to be injected into pages, which will execute when a user accesses an affected page...
CVE-2022-45807
Cross-Site Request Forgery CSRF in WPVibes WP Mail Log plugin = 1.0.1 versions...
CVE-2022-45807
Cross-Site Request Forgery CSRF in WPVibes WP Mail Log plugin = 1.0.1 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in WPVibes WP Mail Log plugin = 1.0.1 versions...
CVE-2022-45807 WordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in WPVibes WP Mail Log plugin = 1.0.1 versions...
CVE-2022-45807
CVE-2022-45807 is a CSRF vulnerability in the WPVibes WP Mail Log plugin, affecting versions <= 1.0.1. The NVD entry reports a CVSS v3.1 base score of 8.8 (HIGH) with network attack vector, requiring user interaction and no privileges, and impact to confidentiality, integrity, and availability...
PT-2023-14759 · Wpvibes · Wpvibes Wp Mail Log
Name of the Vulnerable Software and Affected Versions: WPVibes WP Mail Log plugin versions 1.0.1 and earlier Description: The issue is related to Cross-Site Request Forgery CSRF in the WPVibes WP Mail Log plugin. This means an attacker can trick a user into performing unintended actions on a web...
PT-2022-13868 · WordPress · Wp Mail Log
Name of the Vulnerable Software and Affected Versions: Log WP Mail WordPress plugin versions 0.1 and earlier Description: The issue allows any unauthenticated visitor to obtain potentially sensitive information, such as generated passwords, due to sent emails being saved in a publicly accessible...
WP Mail Logging < 1.10.0 - Outdated Redux Framework
The plugin uses an outdated version of the Redux Framework, which is know to be affected by security issues CVE-2021-38312 and CVE-2021-38314, and could allow unauthenticated attackers to change some of the Framework settings by using CVE-2021-38314 PoC The first endpoint we can identify is...
WordPress WP Mail SMTP by WPForms plugin <= 1.3.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found by RIPS Technologies in WordPress WP Mail SMTP by WPForms plugin versions = 1.3.3. Solution Update the WordPress WP Mail SMTP by WPForms plugin to the latest available version at least 1.4.0...
WP Mail SMTP by WPForms <= 1.3.3 - Authenticated Stored Cross-Site Scripting (XSS)
The WP Mail SMTP by WPForms WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...
WordPress WP Mail Logging plugin <=1.8.2 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability found by Yehuda in WordPress WP Mail Logging plugin versions =1.8.2. Solution Update the WordPress WP Mail Logging plugin to the latest available version at least version 1.8.3...
WordPress WP Mail plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language. wpmail is the function used to send mail. A cross-site scripting vulnerability exists in the WordPress WP Mail plugin due to the program failing to adequately validate user input. An...
CVE-2017-5942
The CVE-2017-5942 entry covers a reflected XSS in the WordPress WP Mail plugin (before version 1.2). The issue arises from the replyto parameter when composing mail, enabling JavaScript execution in the recipient’s browser. Affected component: WP Mail plugin for WordPress (pre-1.2). Root cause: i...
CVE-2017-5942
An issue was discovered in the WP Mail plugin before 1.2 for WordPress. The replyto parameter when composing a mail allows for a reflected XSS. This would allow you to execute JavaScript in the context of the user receiving the mail...