Threats tagged 'ghsa-g4w8-444w-x9q8'

ShopMonitor.io WordPress plugin versions before 1.2.0 contain an improper authentication vulnerability that allows unauthenticated attackers to redirect outgoing emails, including administrator password-reset emails, by exploiting a flawed trusted-source check in the email-rerouting test mode. This can lead to full administrator account takeover.