Skip to content
OpenAdvisories

Product · codemiq

WP HTML Mail

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2022-0218 Scanner template EPSS 66%

    WP HTML Mail <= 3.0.9 Missing Authorization on REST-API Route

    The WP HTML Mail WordPress plugin is vulnerable to unauthorized access which allows unauthenticated attackers to retrieve and modify theme settings due to a missing capability check on the /themesettings REST-API endpoint found in the ~/includes/class-templat…

    codemiq WP HTML Mail Web / CMS