VYPR

Fatal Error Notify

by Verygoodplugins

CVEs (1)

  • CVE-2023-7202MedFeb 27, 2024
    risk 0.40cvss 6.1epss 0.00

    The Fatal Error Notify WordPress plugin before 1.5.3 does not have authorisation and CSRF checks in its test_error AJAX action, allowing any authenticated users, such as subscriber to call it and spam the admin email address with error messages. The issue is also exploitable via…