CyberRota Analysis
AI-GeneratedThe MailerSend WordPress plugin versions prior to 1.0.8 are vulnerable due to a lack of nonce verification in the configuration-delete action, allowing an attacker to exploit this oversight. By tricking a logged-in administrator into visiting a malicious page, the attacker can erase the SMTP configuration and deactivate the plugin, disrupting the site's email delivery functionality. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The MailerSend WordPress plugin before 1.0.8 does not perform a nonce check on its configuration-delete action (it verifies the manage_options capability but ignores the nonce), so an attacker can trick a logged-in administrator into visiting a crafted page that wipes the MailerSend WordPress plugin before 1.0.8's SMTP configuration and deactivates the MailerSend WordPress plugin before 1.0.8, breaking the site's email delivery.