plugin

Threewp Email Reflector Vulnerabilities

1 known security issue reported for the Threewp Email Reflector WordPress plugin. Most recent disclosed Aug 8, 2012.

1 medium

Running Threewp Email Reflector on your site? Check whether your installed version is affected.

Scan your site free

ThreeWP Email Reflector < 1.16 - Cross-Site Scripting

medium

Cross-site scripting (XSS) vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Subject of an email.

CVSS:: 6.1
Affected:: up to 1.16
Fixed in:: 1.16
Disclosed:: Aug 8, 2012

CVE-2012-2572 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database