CVE-2021-20779

HIGH

WordPress Email Template Designer - WP HTML Mail <3.0.8 - CSRF

Title source: llm

Description

Cross-site request forgery (CSRF) vulnerability in WordPress Email Template Designer - WP HTML Mail versions prior to 3.0.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

References (3)

Core 3

Core References

Product, Third Party Advisory x_refsource_misc

https://wordpress.org/plugins/wp-html-mail/

Product x_refsource_misc

https://codemiq.com/en/

Third Party Advisory x_refsource_misc

https://jvn.jp/en/jp/JVN42880365/index.html

Scores

CVSS v3 8.8

EPSS 0.0087

EPSS Percentile 54.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-352

Status published

Products (1)

codemiq/wordpress_email_template_designer < 3.0.8

Published Jul 07, 2021

Tracked Since Feb 18, 2026