Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:E6F3170B-9589-4405-AFCF-F2756B1F496F
HistoryJul 18, 2020 - 12:00 a.m.

Email Subscribers & Newsletters < 4.5.1 - Cross-site Request Forgery in send_test_email()

2020-07-1800:00:00
wpscan.com
8

0.001 Low

EPSS

Percentile

42.1%

JSON

An attacker could exploit this issue by convincing a user to click a specially crafted URL, which will send emails from the affected user’s WordPress email account.

PoC

https://github.com/tenable/poc/blob/master/WordPress/plugins/Icegram/email_subscribers_and_newsletters/csrf_poc.html

CPENameOperatorVersion
email-subscriberslt4.5.1

Related

wpexploit 1
nvd 1
cve 1
prion 1
patchstack 1
cvelist 1
openvas 1
nessus 1
wpexploit
wpexploit
Email Subscribers & Newsletters < 4.5.1 - Cross-site Request Forgery in send_test_email()
2020-07-18 00:00:00
nvd
nvd
CVE-2020-5767
2020-07-17 22:15:11
cve
cve
CVE-2020-5767
2020-07-17 22:15:11
prion
prion
Cross site request forgery (csrf)
2020-07-17 22:15:00
patchstack
patchstack
WordPress Email Subscribers & Newsletters plugin <= 4.5.0.1 - Cross-Site Request Forgery (CSRF) vulnerability
2020-07-17 00:00:00
cvelist
cvelist
CVE-2020-5767
2020-07-17 21:22:59
openvas
openvas
WordPress Email Subscribers Plugin < 4.5.1 Multiple Vulnerabilities
2020-07-21 00:00:00
nessus
nessus
WordPress Plugin 'Email Subscribers & Newsletters' Multiple Vulnerabilities
2020-08-27 00:00:00

0.001 Low

EPSS

Percentile

42.1%

JSON
Related for WPVDB-ID:E6F3170B-9589-4405-AFCF-F2756B1F496F
wpexploit1nvd1cve1prion1patchstack1cvelist1openvas1nessus1