CVE-2024-47339
- EPSS 0.22%
- Veröffentlicht 06.10.2024 11:15:12
- Zuletzt bearbeitet 15.04.2026 00:35:42
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JWardee WP Mail Catcher wp-mail-catcher allows Reflected XSS.This issue affects WP Mail Catcher: from n/a through <= 2.1.9.
CVE-2024-32099
- EPSS 0.16%
- Veröffentlicht 15.04.2024 09:15:10
- Zuletzt bearbeitet 15.04.2026 00:35:42
Cross-Site Request Forgery (CSRF) vulnerability in James Ward WP Mail Catcher.This issue affects WP Mail Catcher: from n/a through 2.1.6.
CVE-2023-50844
- EPSS 0.29%
- Veröffentlicht 28.12.2023 19:15:15
- Zuletzt bearbeitet 21.11.2024 08:37:23
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in James Ward Mail logging – WP Mail Catcher.This issue affects Mail logging – WP Mail Catcher: from n/a through 2.1.3.
CVE-2023-3080
- EPSS 0.89%
- Veröffentlicht 12.07.2023 05:15:09
- Zuletzt bearbeitet 08.04.2026 17:16:58
The WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated ...