Make WordPress Core

Opened 5 years ago

Closed 5 years ago

#31731 closed defect (bug) (invalid)

Mass email Plugin for multisite accessing all emails of users registered

Reported by: nagarajurepala Owned by:
Milestone: Priority: normal
Severity: normal Version: 4.1.1
Component: Plugins Keywords:
Focuses: Cc:


Hello Wordpress team,

while testing plugins in multi site i have found issue with one plugin "mass mail"

where we are able to send mails to all users registered /created sites in multisite network by one of the website admin created in multisite(he is not the super-admin).So i think the information shouldnot be leaked as emails are only accessed by only superadmin, by this we can send bulkmails(large content of spam mails)

Attachments (1)

wpbug.jpg (144.3 KB) - added by nagarajurepala 5 years ago.

Download all attachments as: .zip

Change History (2)

5 years ago


#1 @DrewAPicture
5 years ago

  • Milestone Awaiting Review deleted
  • Resolution set to invalid
  • Status changed from new to closed

Hi nagarajurepala,

You'll want to contact the plugin author directly via their support forums to see if they can help you out.

WordPress Trac is meant to be used for development of the core WordPress software itself.

Note: See TracTickets for help on using tickets.