CVE-2022-43504

score

<0.1

cvss

5.3

epss

1.5%

published

2022-12-05

kev added

—

first seen

2026-10-21

WordPress < 6.0.3 contains an improper authentication caused by insufficient validation in the Post by Email feature, letting remote unauthenticated attackers retrieve user email addresses, exploit requires sending crafted email.