Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-3178

POST SMTP Mailer < 2.5.7 - Arbitrary Log Deletion via CSRF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the manage_postman_smtp capability delete arbitrary logs via a CSRF attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown POST SMTP Mailer

Default version status: unaffected

  • 2.5.0 to < 2.5.7affected

References