medium5.3
CVE-2026-105322
The Magee Shortcodes WordPress plugin through 2.1.1 does not restrict the recipient of some of its unauthenticated contact-form actions, allowing unauthenticat…
Impact
The Magee Shortcodes WordPress plugin through 2.1.1 does not restrict the recipient of some of its unauthenticated contact-form actions, allowing unauthenticated users to send arbitrary emails to any address through the site (mail relay).
Affected products
| Product | Affected versions |
|---|---|
| Magee Shortcodes WordPress Plugin | through 2.1.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.