CVE-2022-2352

CVE-2022-2352 describes an authorization bypass vulnerability in the Post SMTP Mailer/Email Log WordPress plugin prior to version 2.1.7. This flaw allows high-privilege users, such as administrators, to execute blind Server-Side Request Forgery (SSRF) attacks, particularly within multisite installations. With a CVSS score of 7.2 (HIGH), the vulnerability has a network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.