| Package | Affected versions | Patched versions |
|---|---|---|
| wp-email | < 2.69.0 | 2.69.0 |
The WP-EMail WordPress plugin before 2.69.0 does not protect its log deletion functionality with nonce checks, allowing attacker to make a logged in admin delete logs via a CSRF attack
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free