← Back

Yasirwazir

yasirwazir

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Send Email Only On Reply To My Comment
send_email_only_on_reply_to_my_comment
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-6224
1Yasirwazir
1Send Email Only On Reply To My Comment
Jun 17, 2026
Jul 30, 2024
N/A· v4
5.9 MEDIUM· v3
N/A· v2
The Send email only on Reply to My Comment WordPress plugin through 1.0.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add...Show more
The Send email only on Reply to My Comment WordPress plugin through 1.0.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attackShow less
CVE-2024-6223
1Yasirwazir
1Send Email Only On Reply To My Comment
Jun 17, 2026
Jul 30, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The Send email only on Reply to My Comment WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used ag...Show more
The Send email only on Reply to My Comment WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as adminShow less