Description
The WP HTML Mail WordPress plugin is vulnerable to unauthorized access which allows unauthenticated attackers to retrieve and modify theme settings due to a missing capability check on the /themesettings REST-API endpoint found in the ~/includes/class-template-designer.php file, in versions up to and including 3.0.9. This makes it possible for attackers with no privileges to execute the endpoint and add malicious JavaScript to a vulnerable WordPress site.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| codemiq | WP HTML Mail | 3.0.9 – ≤ 3.0.9 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- HTML Email Template Designer < 3.1 - Missing Authorization on Rest Route http/cves/2022/CVE-2022-0218.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.