Unrated severityOSV Advisory· Published Sep 26, 2022· Updated May 21, 2025
Post SMTP < 2.1.7 - Admin+ Blind SSRF
CVE-2022-2352
Description
The Post SMTP Mailer/Email Log WordPress plugin before 2.1.7 does not have proper authorisation in some AJAX actions, which could allow high privilege users such as admin to perform blind SSRF on multisite installations for example.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <2.1.7
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/dc99ac40-646a-4f8e-b2b9-dc55d6d4c55cmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.