WordPress Plugin Vulnerabilities

Mail On Update 5.1.0 - Email Option Manipulation CSRF

Description

The Mail On Update WordPress plugin was affected by an Email Option Manipulation CSRF security vulnerability.

Affects Plugins

Plugin icon
mail-on-update
Fixed in 5.2.0

References

CVE
CVE-2013-2107
URL
https://www.openwall.com/lists/oss-security/2013/05/16/8

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
ad17b771-9800-4869-b4fb-3a2b0f9ba3a0

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-11-27 (about 6 years ago)

Other

Published
Title
Published
2025-01-24
Title
Taxonomy/Term and Role based Discounts for WooCommerce < 5.2 - Cross-Site Request Forgery to Settings Update
Published
2024-12-12
Title
Geoportail Shortcode <= 2.4.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2023-12-27
Title
Crowdsignal Dashboard < 3.1.0 - Rating Update via CSRF
Published
2023-09-29
Title
WP Hide Pages <= 1.0 - Settings Update via CSRF
Published
2025-05-07
Title
Hash Form < 1.2.9 - Cross-Site Request Forgery