Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-1761

Peter’s Collaboration E-mails <= 2.2.0 - Arbitrary Settings Update via CSRF

Description

The Peter’s Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to missing nonce checks. This allows the change of its settings, which can be used to lower the required user level, change texts, the used email address and more.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Peter’s Collaboration E-mails

  • 2.2.0 to ≤ 2.2.0affected

References