Wp Reroute Email Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Wp Reroute Email Project records in CISA KEV

No Wp Reroute Email Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp Reroute Email 3 records MEDIUM

Records

3 records in Wp Reroute Email · all components

TI-2023-12315 CVE-2023-27605 · GHSA-p3wg-m8cr-724c

WordPress WP Reroute Email Plugin <= 1.4.6 is vulnerable to SQL Injection

MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sajjad Hossain WP Reroute Email allows SQL Injection.This issue affects WP Reroute Email: from n/a through 1.4.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00681 Published 2023-11-06 No fix listed CWE-89

TI-2023-12316 CVE-2023-27606 · GHSA-6qh4-vh24-8hwf

WordPress WP Reroute Email Plugin <= 1.4.6 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Sajjad Hossain WP Reroute Email plugin <= 1.4.6 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00248 Published 2023-07-17 No fix listed CWE-352

TI-2023-02968 CVE-2023-3168 · GHSA-g6j4-x3qf-4823

WP Reroute Email <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via Email Subject

LOW 38

The WP Reroute Email plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 1.4.9 due to insufficient input sanitization and output escaping.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00462 Published 2023-07-12 No fix listed CWE-79

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0