CVE-2019-25150

HIGH 8.8CVE-2019-25150 · Published 07/06/2023 · updated 17/06/2026

In short

CVE-2019-25150 is a HIGH (CVSS 8.8) vulnerability affecting email templates (wpexperts).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.0% of all vulnerabilities.
Fix: update to 1.3.1 or later.

Package	Affected versions	Patched versions
email templates wpexperts	`< 1.3.1`	`1.3.1`

Description

The Email Templates plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.3. This makes it possible for attackers to present phishing forms or conduct cross-site request forgery attacks against site administrators.

References

blog.nintechnet.com/multiple-wordpress-plugins-vulnerable-to-html-injection · Exploit
wordpress.org/plugins/email-templates · Product
wordfence.com/threat-intel/vulnerabilities/id/f5c449f1-4715-4033-b0a3-6a8ca968aabc · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free