PT-2022-14161 · WordPress · Emailpress

Daniel Ruf · Published 2022-06-27 · Updated 2022-07-06 · CVE-2022-1843

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions MailPress WordPress plugin versions prior to 7.2.2

Description The issue concerns the lack of CSRF checks in various parts of the plugin, which could allow attackers to perform actions such as changing settings or purging log files by tricking a logged-in admin into performing unintended actions via CSRF attacks.

Recommendations For MailPress WordPress plugin versions prior to 7.2.2, update to version 7.2.2 or later to resolve the issue.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2022-1843

Affected Products

Emailpress

References · 3

• 🔥 https://wpscan.com/vulnerability/aa59f811-2375-4593-93d4-f587f9870ed1 · Exploit
• https://osv.dev/vulnerability/CVE-2022-1843 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1843 · Security Note