{"id":"CVE-2022-1761","aliases":["EUVD-2022-25042","GHSA-mrqr-j2cq-8xg7"],"status":"published","title":"Peter’s Collaboration E-mails \u003c= 2.2.0 - Arbitrary Settings Update via CSRF","description":"The Peter’s Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to missing nonce checks. This allows the change of its settings, which can be used to lower the required user level, change texts, the used email address and more.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00531,"percentile":0.45203,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2022-06-13T12:42:37Z","modified":"2026-06-17T04:23:03Z","products":[{"vendor":"peter\\'s_collaboration_e-mails_project","product":"peter\\'s_collaboration_e-mails"},{"vendor":"unknown","product":"peter’s collaboration e-mails"}],"references":[{"url":"https://wpscan.com/vulnerability/31b413e1-d4b5-463e-9910-37876881c062","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1761"},{"url":"https://github.com/advisories/GHSA-mrqr-j2cq-8xg7"}],"sources":{"cve":[{"id":"CVE-2022-1761","title":"Peter’s Collaboration E-mails \u003c= 2.2.0 - Arbitrary Settings Update via CSRF","description":"The Peter’s Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to missing nonce checks. This allows the change of its settings, which can be used to lower the required user level, change texts, the used email address and more.","status":"published","published":"2022-06-13T12:42:37Z","modified":"2024-08-03T00:16:59.654Z","cwes":["CWE-352"],"updated_at":"2026-11-02T14:34:38.581997Z"}],"euvd":[{"id":"EUVD-2022-25042","description":"The Peter’s Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to missing nonce checks. This allows the change of its settings, which can be used to lower the required user level, change texts, the used email address and more.","status":"published","published":"2022-06-13T12:42:37Z","modified":"2024-08-03T00:16:59Z","updated_at":"2026-11-03T03:26:00.556048Z"}],"ghsa":[{"id":"GHSA-mrqr-j2cq-8xg7","title":"The Peter’s Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to...","description":"The Peter’s Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to missing nonce checks. This allows the change of its settings, which can be used to lower the required user level, change texts, the used email address and more.","status":"published","published":"2022-06-14T00:00:36Z","modified":"2023-01-27T05:04:08Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:42:24.095154Z"}],"nvd":[{"id":"CVE-2022-1761","description":"The Peter’s Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to missing nonce checks. This allows the change of its settings, which can be used to lower the required user level, change texts, the used email address and more.","status":"published","published":"2022-06-13T13:15:12.153Z","modified":"2026-06-17T04:23:03.977Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:07:22.232533Z"}]}}