cve/2022/CVE-2022-1761.md
2024-06-18 02:51:15 +02:00

855 B
Raw Permalink Blame History

CVE-2022-1761

Description

The Peters Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to missing nonce checks. This allows the change of its settings, which can be used to lower the required user level, change texts, the used email address and more.

POC

Reference

Github