Vulnerabilities > CVE-2022-1843 - Unspecified vulnerability in Mailpress Project Mailpress

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
mailpress-project

Summary

The MailPress WordPress plugin through 7.2.1 does not have CSRF checks in various places, which could allow attackers to make a logged in admin change the settings, purge log files and more via CSRF attacks

Vulnerable Configurations

Part Description Count
Application
Mailpress_Project
1