Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: codemiq Component: Wordpress Email Template Designer Clear all filters
TI-2022-00155 CVE-2022-0218 · GHSA-6434-hpfm-8425

WP HTML Mail <= 3.0.9 Missing Authorization on REST-API Route

Priority HIGH 78

The WP HTML Mail WordPress plugin is vulnerable to unauthorized access which allows unauthenticated attackers to retrieve and modify theme settings due to a missing capability check on the /themesettings REST-API endpoin…

CVSS 3.1HIGH 8.3 Network No auth No interaction EPSS 0.66406 Published 2022-02-04 No fix listed CWE-79
TI-2021-04005 CVE-2021-20779 · GHSA-76mh-x8fp-m6p4

Cross-site request forgery in codemiq WordPress Email Template Designer - WP HTML Mail

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in WordPress Email Template Designer - WP HTML Mail versions prior to 3.0.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0087 Published 2021-07-07 Fixed in 3.0.8 CWE-352