CyberRota
← Ana sayfaya dön

CVE-2026-18437

MEDIUM · CVSS 5.3

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-31T10:16:45.157 · Çekilme zamanı: 2026-07-31T12:07:49.504493+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-18437
Severity
MEDIUM
CVSS
5.3
EPSS
Yok
WordPress

Orijinal NVD Açıklaması

The MailerPress – Newsletter, email marketing & AI automation plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the `mailerpress/v1/contact` endpoint in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to update contact details.