CVE-2026-18437 in MailerPress Plugin정보

요약

\~에 의해 MITRE • 2026. 07. 31.

The MailerPress – Newsletter, email marketing & AI automation plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the `mailerpress/v1/contact` endpoint in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to update contact details.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

책임이 있는

Wordfence

예약하다

2026. 07. 30.

공개

2026. 07. 31.

모더레이션

수락

항목

VDB-385061

CPE

준비됨

CWE

CWE-285 (확인됨)

CVSS

5.3 (VulDB)

EPSS

0.00000

KEV

아니요

활동

매우 낮음

부문

Hostingprovider

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-18437
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-18437
CVE Details	https://www.cvedetails.com/cve/CVE-2026-18437/

◂ 이전 개요 다음 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!