Vulnerabilities

TI-2024-21176 CVE-2024-32099 · GHSA-xf3f-gwvp-r5m8

WordPress WP Mail Catcher plugin <= 2.1.6 - Cross Site Request Forgery vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in James Ward WP Mail Catcher.This issue affects WP Mail Catcher: from n/a through 2.1.6.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00212 Published 2024-04-15 No fix listed CWE-352

TI-2023-27749 CVE-2023-50844 · GHSA-jj5v-fhp7-pww8

WordPress WP Mail Catcher Plugin <= 2.1.3 is vulnerable to SQL Injection

LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in James Ward Mail logging – WP Mail Catcher.This issue affects Mail logging – WP Mail Catcher: from n/a through 2.1.3.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00529 Published 2023-12-28 No fix listed CWE-89

TI-2023-02886 CVE-2023-3080 · GHSA-fpmh-3mrp-3732

WP Mail Catcher <= 2.1.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject

LOW 32

The WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00462 Published 2023-07-12 No fix listed CWE-79

Vulnerabilities

Filters

WordPress WP Mail Catcher plugin <= 2.1.6 - Cross Site Request Forgery vulnerability

WordPress WP Mail Catcher Plugin <= 2.1.3 is vulnerable to SQL Injection

WP Mail Catcher <= 2.1.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject