CVE-2022-1761

MEDIUM

Peter's Collaboration E-mails < 2.2.0 - Cross-Site Request Forgery via Missing Nonce Check

Title source: llm
STIX 2.1

Description

The Peter’s Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to missing nonce checks. This allows the change of its settings, which can be used to lower the required user level, change texts, the used email address and more.

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://wpscan.com/vulnerability/31b413e1-d4b5-463e-9910-37876881c062

Scores

CVSS v3 6.5
EPSS 0.0050
EPSS Percentile 39.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Details

CWE
CWE-352
Status published
Products (1)
peter\'s_collaboration_e-mails_project/peter\'s_collaboration_e-mails < 2.2.0
Published Jun 13, 2022
Tracked Since Feb 18, 2026