Description
WordPress Plugin Conditional Marketing Mailer for WooCommerce is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently install arbitrary plugins. WordPress Plugin Conditional Marketing Mailer for WooCommerce version 1.5.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.5.2 or latest
References
Related Vulnerabilities
WordPress Plugin Video Player Unspecified Vulnerability (1.1.4)
WordPress Plugin Influencer Marketing & Press Release System Cross-Site Scripting (2.2)
WordPress Improper Access Control Vulnerability (CVE-2015-5623)
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-27556)
WordPress Plugin WP Accurate Form Data Multiple Vulnerabilities (1.2)