CVE-2012-2572 ThreeWP Email Reflector < 1.16 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 4.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Subject of an email.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mindreantre threewp email reflector | <= 1.15 | No fix listed |
| mindreantre threewp email reflector | = 1.0 | No fix listed |
| mindreantre threewp email reflector | = 1.1 | No fix listed |
| mindreantre threewp email reflector | = 1.2 | No fix listed |
| mindreantre threewp email reflector | = 1.3 | No fix listed |
| mindreantre threewp email reflector | = 1.4 | No fix listed |
| mindreantre threewp email reflector | = 1.5 | No fix listed |
| mindreantre threewp email reflector | = 1.6 | No fix listed |
| mindreantre threewp email reflector | = 1.7 | No fix listed |
| mindreantre threewp email reflector | = 1.8 | No fix listed |
| mindreantre threewp email reflector | = 1.9 | No fix listed |
| mindreantre threewp email reflector | = 1.10 | No fix listed |
| mindreantre threewp email reflector | = 1.11 | No fix listed |
| mindreantre threewp email reflector | = 1.12 | No fix listed |
| mindreantre threewp email reflector | = 1.13 | No fix listed |
| mindreantre threewp email reflector | = 1.14 | No fix listed |
| wordpress threewp-email-reflector(WordPress) | < 1.16 | 1.16 |
References
- 85134 vdb-entry
- wordpress.org patch
- 20365 exploit
- 54903 exploit vdb-entry
- threewpemailreflector-sendmail-xss(77502) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org