Description
WordPress Plugin WP Mass Mail is prone to an open email relay vulnerability that lets attackers send mass emails without authentication. An attacker could exploit this issue to send unsolicited spam email to an unrestricted number of email addresses. WordPress Plugin WP Mass Mail version 2.45 is vulnerable; other versions may also be affected.
Remediation
Disable the plugin until a fix is available
References
http://www.securityfocus.com/bid/53818/exploit
http://packetstormsecurity.com/files/113286/WordPress-WP-Mass-Mail-Spoofing.html
Related Vulnerabilities
PHP Other Vulnerability (CVE-2015-0231)
ownCloud Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2021-35947)
WordPress Plugin DW Question & Answer Cross-Site Scripting (1.4.2.2)
Oracle HTTP Server CVE-2018-2760 Vulnerability (CVE-2018-2760)
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Request Forgery (1.23.3)