Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-105322

Magee Shortcodes <= 2.1.1 - Unauthenticated Mail Relay via Contact Form

Description

The Magee Shortcodes WordPress plugin through 2.1.1 does not restrict the recipient of some of its unauthenticated contact-form actions, allowing unauthenticated users to send arbitrary emails to any address through the site (mail relay).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Magee Shortcodes

Default version status: unknown

  • 0 to ≤ 2.1.1affected

References