CVE-2019-20203

5.3 mediumEPSS 2.1%

Medium (5.3) in postieplugin postie. EPSS 2.1% chance of exploitation in the next 30 days.

The Authorized Addresses feature in the Postie plugin 1.9.40 for WordPress allows remote attackers to publish posts by spoofing the From information of an email message.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-290
Published: 2020-01-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

postieplugin:postie

References

https://github.com/V1n1v131r4/Exploiting-Postie-WordPress-Plugin-/blob/master/README.md
https://postieplugin.com/
https://wordpress.org/plugins/postie/#developers
https://wpvulndb.com/vulnerabilities/10002
https://github.com/V1n1v131r4/Exploiting-Postie-WordPress-Plugin-/blob/master/README.md

Check your stack JSON