CVE-2017-6955

CVE-2017-6955 describes an improper input validation vulnerability in the Invite Anyone plugin for WordPress, specifically in by-email/by-email.php before version 1.3.15. This flaw allows an unauthenticated attacker to manipulate the subject and body of invitation emails, enabling social engineering attacks. With a CVSS score of 5.3 (Medium), the vulnerability is easily exploitable over the network with low attack complexity, impacting integrity by allowing unauthorized modification of email content. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.