CVE Database
/

CVE-2022-1630

Back to search

CVE-2022-1630

Published: Jun 20, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

The WP-EMail WordPress plugin before 2.69.0 does not protect its log deletion functionality with nonce checks, allowing attacker to make a logged in admin delete logs via a CSRF attack

VendorProductVersions

Unknown

WP-EMail

affected
2.69.0 - < 2.69.0

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now