CVE-2022-1761 — Peter’s Collaboration E-mails <= 2.2.0 - Arbitrary Settings Update via CSRF
The Peter’s Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to missing nonce checks. This allows the change of its settings, which can be used to …
Published: 2022-06-13 · CVSS: Unscored
The Peter’s Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to missing nonce checks. This allows the change of its settings, which can be used to lower the required user level, change texts, the used email address and more.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7