Vulnerabilities > Codemiq > Wordpress Email Template Designer > 2.7

DATE	CVE	VULNERABILITY TITLE	RISK
2022-02-04	CVE-2022-0218	Cross-site Scripting vulnerability in Codemiq Wordpress Email Template Designer The WP HTML Mail WordPress plugin is vulnerable to unauthorized access which allows unauthenticated attackers to retrieve and modify theme settings due to a missing capability check on the /themesettings REST-API endpoint found in the ~/includes/class-template-designer.php file, in versions up to and including 3.0.9. network codemiq CWE-79	4.3

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.