CVE-2022-1630CWE-352
WP-Email < 2.69.0 - Log Deletion via CSRF
published June 20, 2022
What it is
The WP-EMail WordPress plugin before 2.69.0 does not protect its log deletion functionality with nonce checks, allowing attacker to make a logged in admin delete logs via a CSRF attack
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00534 · 44.3th percentile
- Weakness
- CWE-352 · Cross-Site Request Forgery (CSRF)
- Published
- 2022-06-20T10:25Z
EPSS history
Timeline