Unauthenticated Email Relay Vulnerability in Super Store Finder Plugin for WordPress

CVE-2023-5054

What is CVE-2023-5054?

The Super Store Finder plugin for WordPress is vulnerable due to inadequate restrictions on the sendMail.php file, which permits unauthorized access. This flaw enables attackers to exploit the site's server for sending emails with arbitrary content. The vulnerability affects all versions up to and including 6.9.3. The publicly disclosed nature of this vulnerability and known exploits necessitate immediate attention to secure the affected systems.

References