The Fatal Error Notify WordPress plugin before 1.5.3 does not have authorisation and CSRF checks in its test_error AJAX action, allowing any authenticated users, such as subscriber to call it and spam the admin email add…
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00228·Published 2024-02-27·Fixed in 1.5.3CWE-352