Skip to content
OpenAdvisories

Vendor

codemiq

2 known vulnerabilities.

Products

WordPress Email Template Designer - WP HTML Mail 1 WP HTML Mail 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2022-0218 EPSS 66%

    WP HTML Mail <= 3.0.9 Missing Authorization on REST-API Route

    The WP HTML Mail WordPress plugin is vulnerable to unauthorized access which allows unauthenticated attackers to retrieve and modify theme settings due to a missing capability check on the /themesettings REST-API endpoint found in the ~/includes/class-templat…

    codemiq WP HTML Mail Web / CMS