Vulnerabilities

TI-2023-27749 CVE-2023-50844 · GHSA-jj5v-fhp7-pww8

WordPress WP Mail Catcher Plugin <= 2.1.3 is vulnerable to SQL Injection

LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in James Ward Mail logging – WP Mail Catcher.This issue affects Mail logging – WP Mail Catcher: from n/a through 2.1.3.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00529 Published 2023-12-28 No fix listed CWE-89

TI-2023-02886 CVE-2023-3080 · GHSA-fpmh-3mrp-3732

WP Mail Catcher <= 2.1.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject

LOW 32

The WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00462 Published 2023-07-12 No fix listed CWE-79

Vulnerabilities

Filters

WordPress WP Mail Catcher Plugin <= 2.1.3 is vulnerable to SQL Injection

WP Mail Catcher <= 2.1.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject