CVE-2017-6955

An issue was discovered in by-email/by-email.php in the Invite Anyone plugin before 1.3.15 for WordPress. A user is able to change the subject and the body of the invitation mail that should be immutable, which facilitates a social engineering attack.

• CWE-20

• http://www.securityfocus.com/bid/96965Third Party Advisory, VDB Entry
• https://github.com/boonebgorges/invite-anyone/compare/2ed5266ad3ae40f8db39adf06f450bbad56e2eac...boonebgorges:6121de08df86c5005b657dd67e48aa02c7982855Third Party Advisory
• https://wordpress.org/plugins/invite-anyone/changelog/Release Notes, Third Party Advisory
• http://www.securityfocus.com/bid/96965Third Party Advisory, VDB Entry
• https://github.com/boonebgorges/invite-anyone/compare/2ed5266ad3ae40f8db39adf06f450bbad56e2eac...boonebgorges:6121de08df86c5005b657dd67e48aa02c7982855Third Party Advisory
• https://wordpress.org/plugins/invite-anyone/changelog/Release Notes, Third Party Advisory

Published

Mar 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6949An issue was discovered in CHICKEN Scheme through 4.12.0. Wh…
• CVE-2017-6950SAP GUI 7.2 through 7.5 allows remote attackers to bypass in…
• CVE-2017-6951The keyring_search_aux function in security/keys/keyring.c i…
• CVE-2017-6952Integer overflow in the cs_winkernel_malloc function in wink…
• CVE-2017-6953Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buff…
• CVE-2017-6954An issue was discovered in includes/component.php in the Bud…
• CVE-2017-6956On the Broadcom Wi-Fi HardMAC SoC with fbt firmware, a stack…
• CVE-2017-6957Stack-based buffer overflow in the firmware in Broadcom Wi-F…
• CVE-2017-6958An XSS vulnerability in the MantisBT Source Integration Plug…6.1
• CVE-2017-6959Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-6960An issue was discovered in apng2gif 1.7. There is an integer…7.5
• CVE-2017-6961An issue was discovered in apng2gif 1.7. There is improper s…