WordPress Plugin Vulnerabilities
Email Subscribers & Newsletters < 4.5.1 - Cross-site Request Forgery in send_test_email()
Description
An attacker could exploit this issue by convincing a user to click a specially crafted URL, which will send emails from the affected user’s WordPress email account.
Proof of Concept
Affects Plugins
Fixed in 4.5.1 References
Classification
Type
CSRF
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Alex Peña (Tenable)
Verified
No
WPVDB ID
Timeline
Publicly Published
2020-07-18 (about 5 years ago)
Added
2020-07-18 (about 5 years ago)
Last Updated
2020-07-20 (about 5 years ago)
WPScan 