Email Sending Vulnerability in WordPress Plugin by WPScan
CVE-2023-6042
7.5HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2023-6042?
An issue has been identified in a WordPress plugin that permits any unauthenticated user to send emails with arbitrary content and titles to the site administrator. This vulnerability raises significant concerns regarding unauthorized communications and potential phishing attacks, making it imperative for site administrators to secure their installations against such threats.
Affected Version(s)
Getwid 0 < 2.0.3
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.