CVE-2022-1843CWE-352
MailPress <= 7.2.1 - Arbitrary Settings Update & Log Files Purge via CSRF
published June 27, 2022
What it is
The MailPress WordPress plugin through 7.2.1 does not have CSRF checks in various places, which could allow attackers to make a logged in admin change the settings, purge log files and more via CSRF attacks
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00523 · 43.5th percentile
- Weakness
- CWE-352 · Cross-Site Request Forgery (CSRF)
- Published
- 2022-06-27T08:57Z
EPSS history
Timeline