Publish Post Email Notification Vulnerabilities

The wordpress publish post email notification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2.3. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update plugin settings granted they ca...

CVSS:

4.3

Affected:

up to 1.0.2.3

Fixed in:

1.0.2.4

Disclosed:

Mar 27, 2025

CVE-2025-30816 on NVD →

[en] Cross-Site Request Forgery (CSRF) vulnerability in Nks publish post email notification allows Cross Site Request Forgery. This issue affects publish post email notification: from n/a through 1.0.2.3.

Affected:

up to 1.0.2.4

Fixed in:

1.0.2.4

Disclosed:

Mar 27, 2025

CVE-2025-30816 on NVD →

[en] Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution WordPress publish post email notification plugin <= 1.0.2.2 versions.

Affected:

up to 1.0.2.3

Fixed in:

1.0.2.3

Disclosed:

Oct 2, 2023

CVE-2023-41731 on NVD →

The wordpress publish post email notification plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.0.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and...

CVSS:

4.4

Affected:

up to 1.0.2.2

Fixed in:

1.0.2.3

Disclosed:

Sep 5, 2023

CVE-2023-41731 on NVD →