TI-2023-06588 CVE-2023-7202 · GHSA-wp95-g3h2-jhqf
Fatal Error Notify < 1.5.3 - Subscriber+ Test Error Email Sending
Priority LOW 27
The Fatal Error Notify WordPress plugin before 1.5.3 does not have authorisation and CSRF checks in its test_error AJAX action, allowing any authenticated users, such as subscriber to call it and spam the admin email add…