Read the docs

Mailpress Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Mailpress Project records in CISA KEV

No Mailpress Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mailpress 1 record LOW

Records

1 record

TI-2022-01707 CVE-2022-1843 · GHSA-v772-p336-gr44

MailPress <= 7.2.1 - Arbitrary Settings Update & Log Files Purge via CSRF

Priority LOW 29

The MailPress WordPress plugin through 7.2.1 does not have CSRF checks in various places, which could allow attackers to make a logged in admin change the settings, purge log files and more via CSRF attacks

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00523 Published 2022-06-27 No fix listed CWE-352
Open these records in search →