Description
WordPress Plugin WP Mass Mail is prone to an open email relay vulnerability that lets attackers send mass emails without authentication. An attacker could exploit this issue to send unsolicited spam email to an unrestricted number of email addresses. WordPress Plugin WP Mass Mail version 2.45 is vulnerable; other versions may also be affected.
Remediation
Disable the plugin until a fix is available
References
http://www.securityfocus.com/bid/53818/exploit
http://packetstormsecurity.com/files/113286/WordPress-WP-Mass-Mail-Spoofing.html
Related Vulnerabilities
WordPress Plugin WebLibrarian Multiple Unspecified Vulnerabilities (2.6.3.1)
WordPress Plugin WR ContactForm SQL Injection (1.1.9)
Python Other Vulnerability (CVE-2005-0089)
Microsoft SQL Server Other Vulnerability (CVE-2002-0643)
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2019-17267)