Description

WordPress Plugin WP Mass Mail is prone to an open email relay vulnerability that lets attackers send mass emails without authentication. An attacker could exploit this issue to send unsolicited spam email to an unrestricted number of email addresses. WordPress Plugin WP Mass Mail version 2.45 is vulnerable; other versions may also be affected.

Remediation

Disable the plugin until a fix is available

References

http://www.securityfocus.com/bid/53818/exploit

http://packetstormsecurity.com/files/113286/WordPress-WP-Mass-Mail-Spoofing.html

http://1337day.com/exploits/18445

Related Vulnerabilities

Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-10687)

TCExam Missing Authorization Vulnerability (CVE-2023-6554)

WordPress Plugin Protected Posts Logout Button Cross-Site Request Forgery (1.4.4)

Oracle Database Server CVE-2012-1751 Vulnerability (CVE-2012-1751)

phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-19968)

Severity

High

Classification

CWE-264 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Tags

Missing Update