Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3ww7-h83j-f3rc

Опубликовано: 27 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.8

Описание

The AIomatic - Automatic AI Content Writer for WordPress is vulnerable to arbitrary email sending vulnerability in versions up to, and including, 2.0.5. This is due to insufficient limitations on the email recipient and the content in the 'aiomatic_send_email' function which are reachable via AJAX. This makes it possible for unauthenticated attackers to send emails with any content to any recipient.

The AIomatic - Automatic AI Content Writer for WordPress is vulnerable to arbitrary email sending vulnerability in versions up to, and including, 2.0.5. This is due to insufficient limitations on the email recipient and the content in the 'aiomatic_send_email' function which are reachable via AJAX. This makes it possible for unauthenticated attackers to send emails with any content to any recipient.

EPSS

Процентиль: 65%
0.00483
Низкий

5.8 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.8
nvd
больше 1 года назад

The AIomatic - Automatic AI Content Writer for WordPress is vulnerable to arbitrary email sending vulnerability in versions up to, and including, 2.0.5. This is due to insufficient limitations on the email recipient and the content in the 'aiomatic_send_email' function which are reachable via AJAX. This makes it possible for unauthenticated attackers to send emails with any content to any recipient.

EPSS

Процентиль: 65%
0.00483
Низкий

5.8 Medium

CVSS3

Дефекты

CWE-20