The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Fatal Error Notify WordPress plugin before 1.5.3 does not have authorisation and CSRF checks in its test_error AJAX action, allowing any authenticated users, such as subscriber to call it and spam the admin email address with error messages. The issue is also exploitable via CSRF
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fatal Error Notify Plugin | — | Update fatal-error-notify plugin to version 1.5.3, or a newer patched version | May 15, 2025 | Jan 30, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub