plugin
6 known security issues reported for the Welcome Email Editor WordPress plugin. Most recent disclosed Dec 9, 2024.
Running Welcome Email Editor on your site? Check whether your installed version is affected.
Scan your site free[en] Missing Authorization vulnerability in David Vongries Welcome Email Editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Welcome Email Editor: from n/a through 5.0.6.
The Swift SMTP (formerly Welcome Email Editor) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0.6. This is due to missing or incorrect nonce validation on the ajax_handler() function. This makes it possible for unauthenticated attackers to send emails via a forg...
The Swift SMTP (formerly Welcome Email Editor) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0.6. This is due to missing or incorrect nonce validation on the ajax_handler() function. This makes it possible for unauthenticated attackers to send emails via a forg...
Update the WordPress Welcome Email Editor plugin to the latest available version (at least 5.0.7). ajax_handler discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress Welcome Email Editor Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted a...
The Welcome Email Editor plugin for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the ajax_handler function in versions up to, and including, 5.0.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to send a variety of emails.
The Swift SMTP (formerly Welcome Email Editor) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0.6. This is due to missing or incorrect nonce validation on the ajax_handler() function. This makes it possible for unauthenticated attackers to send emails via a forg...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free