Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2022-2352

Post SMTP < 2.1.7 - Admin+ Blind SSRF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Post SMTP Mailer/Email Log WordPress plugin before 2.1.7 does not have proper authorisation in some AJAX actions, which could allow high privilege users such as admin to perform blind SSRF on multisite installations for example.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Post SMTP Mailer/Email Log

  • 2.1.7 to < 2.1.7affected

References