Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-2583. PoCs published by loneferret.
AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in Mini Mail Dashboard Widget 1.42 by sending an email with a malicious payload. The payload is executed when the victim views the email in HTML format.
Description
Cross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers to inject arbitrary web script or HTML via the body of an email.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by loneferret · pythonwebappsphp
https://www.exploit-db.com/exploits/20358
This exploit demonstrates a stored XSS vulnerability in Mini Mail Dashboard Widget 1.42 by sending an email with a malicious payload. The payload is executed when the victim views the email in HTML format.
Classification
Working Poc 95%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:
Mini Mail Dashboard Widget 1.42
Auth required
Prerequisites:
Valid SMTP credentials · Victim interaction to view email in HTML
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/77536
Exploit exploit
x_refsource_exploit-db
http://www.exploit-db.com/exploits/20358
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/show/osvdb/85135
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/54888
Scores
EPSS
0.0375
EPSS Percentile
88.5%
Details
CWE
CWE-79
Status
published
Products (1)
mini_mail_dashboard_widget_project/mini_mail_dashboard_widget
1.42
Published
Sep 17, 2014
Tracked Since
Feb 18, 2026