← Database

CVE-2022-1843

MEDIUM CVSS: 6.5 Published: 2022-06-27 Modified: 2026-06-17

Description

The MailPress WordPress plugin through 7.2.1 does not have CSRF checks in various places, which could allow attackers to make a logged in admin change the settings, purge log files and more via CSRF attacks

Affected Platforms

Mailpress Project Mailpress

Weakness Type

CWE-352

References