What’s Vulnerable › Vulnerabilities

CVE-2022-1761: Peter’s Collaboration E-mails <= 2.2.0 - Arbitrary Settings Update via CSRF

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-06-13 · updated 2026-06-17
• Weakness: CWE-352

Description

The Peter’s Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to missing nonce checks. This allows the change of its settings, which can be used to lower the required user level, change texts, the used email address and more.

Affected products

• Peter’s Collaboration E-mails: through 2.2.0

References

• https://wpscan.com/vulnerability/31b413e1-d4b5-463e-9910-37876881c062
• https://wpscan.com/vulnerability/31b413e1-d4b5-463e-9910-37876881c062

Get alerted when CVE-2022-1761 or the next vulnerability affects your stack