CVE-2012-2580

MEDIUM 4.3CVE-2012-2580 · Published 20/06/2014 · updated 16/06/2026

In short

CVE-2012-2580 is a MEDIUM (CVSS 4.3) vulnerability affecting postie (postieplugin).
Chance of exploitation in the next 30 days (EPSS): 3.7%, higher than 89.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
postie postieplugin	`= 1.4.3≤ 1.5.14`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to inject arbitrary web script or HTML via the From field of an email.

References

osvdb.org/84532
secunia.com/advisories/50207
exploit-db.com/exploits/20360 · Exploit
securityfocus.com/bid/54909 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/77537

CVE-2012-2580

In short

Description

References

More vulnerabilities in postie

CVE-2012-2580

In short

Description

References

More vulnerabilities in postie