CVE-2017-6955

An issue was discovered in by-email/by-email.php in the Invite Anyone plugin before 1.3.15 for WordPress

published March 17, 2017

CVSS
—
EPSS
2%
Percentile
78.1
In the wild
Unconfirmed
What it is

An issue was discovered in by-email/by-email.php in the Invite Anyone plugin before 1.3.15 for WordPress. A user is able to change the subject and the body of the invitation mail that should be immutable, which facilitates a social engineering attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01794 · 78.1th percentile
Published
2017-03-17T08:55Z
EPSS history
Timeline
  • 17 MAR 08:55Z
    An issue was discovered in by-email/by-email.php in the Invite Anyone plugin before 1.3.15 for WordPress
    cvelistv5