CVE-2022-1630 | BDVDB-2026-178598 Detail

WP-EMail

Description#

The WP-EMail WordPress plugin before 2.69.0 does not protect its log deletion functionality with nonce checks, allowing attacker to make a logged in admin delete logs via a CSRF attack

Impact#

No impact statement in the source data.

Weaknesses#

CWE-352 Cross-Site Request Forgery (CSRF)

References#

https://wpscan.com/vulnerability/178d0c49-3a93-4948-8734-f3d7518361b3

Exploit#

No public exploit known

History#

Version 12022-06-20Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.