Non évaluée

POST SMTP Mailer < 2.5.7 - Arbitrary Log Deletion via CSRF

CVE-2023-3178 Première détection SecPulse Jan 17, 2024

Description d'origine La description telle que publiée par la source (souvent en anglais).

The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the manage_postman_smtp capability delete arbitrary logs via a CSRF attack.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
report wpscan.com
web wordpress.org

Faits clés

Gravité: Non évaluée
Publication: Jan 17, 2024
Première détection SecPulse: Jan 17, 2024

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:58