Wp-email Project

Wp-email

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2022-1614

Exploit
  • EPSS 0.23%
  • Published 20.06.2022 11:15:09
  • Last modified 21.11.2024 06:41:05

The WP-EMail WordPress plugin before 2.69.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based anti-spamming restrictions.

6.5

CVE-2022-1630

Exploit
  • EPSS 0.13%
  • Published 20.06.2022 11:15:09
  • Last modified 21.11.2024 06:41:08

The WP-EMail WordPress plugin before 2.69.0 does not protect its log deletion functionality with nonce checks, allowing attacker to make a logged in admin delete logs via a CSRF attack