Filtered by vendor Mailersend Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-13156 2 Mailersend, Wordpress 2 Mailersend, Wordpress 2026-08-02 5.4 Medium
The MailerSend WordPress plugin before 1.0.8 does not perform a nonce check on its configuration-delete action (it verifies the manage_options capability but ignores the nonce), so an attacker can trick a logged-in administrator into visiting a crafted page that wipes the MailerSend WordPress plugin before 1.0.8's SMTP configuration and deactivates the MailerSend WordPress plugin before 1.0.8, breaking the site's email delivery.