WordPress CVEs

Description

Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to inject arbitrary web script or HTML via the From field of an email.

Affected WordPress components

• Postie Plugin · postie
  Confirmed match Active
  Up to and including 1.5.14; Version 1.4.3
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• n/a n/a — Versions not specified
• postieplugin postie — Up to and including 1.5.14
• postieplugin postie — Version 1.4.3

References

• osvdb.org http://osvdb.org/84532
• secunia.com http://secunia.com/advisories/50207
• www.exploit-db.com http://www.exploit-db.com/exploits/20360 Exploit
• www.securityfocus.com http://www.securityfocus.com/bid/54909 Exploit
• exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/77537
• nvd.nist.gov Official NVD record