CVE-2012-2572

Published: Jun 19, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Subject of an email.

Affected (16)

Products: Mindreantre: Threewp Email Reflector

Mindreantre

1 product

Threewp Email Reflector

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Mindreantre Threewp Email Reflector	Up to 1.15
Mindreantre Threewp Email Reflector	Version 1.0
Mindreantre Threewp Email Reflector	Version 1.10
Mindreantre Threewp Email Reflector	Version 1.11
Mindreantre Threewp Email Reflector	Version 1.12
Mindreantre Threewp Email Reflector	Version 1.13
Mindreantre Threewp Email Reflector	Version 1.14
Mindreantre Threewp Email Reflector	Version 1.1
Mindreantre Threewp Email Reflector	Version 1.2
Mindreantre Threewp Email Reflector	Version 1.3
Mindreantre Threewp Email Reflector	Version 1.4
Mindreantre Threewp Email Reflector	Version 1.5
Mindreantre Threewp Email Reflector	Version 1.6
Mindreantre Threewp Email Reflector	Version 1.7
Mindreantre Threewp Email Reflector	Version 1.8
Mindreantre Threewp Email Reflector	Version 1.9