Send Emails with Mandrill <= 1.4.1 - Missing Authorization
mediumThe Send Emails with Mandrill plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the getAjaxStats() function in all versions up to, and including, 1.4.1. This makes it possible for unauthenticated attackers to get stats.
- CVSS:
- 4.3
- Affected:
- up to 1.4.1
- Fixed in:
- 1.4.2
- Disclosed:
- Aug 9, 2024