CVE-2016-10033

Name of the Vulnerable Software and Affected Versions PHPMailer versions prior to 5.2.18 Wordpress version 4.6

Description The issue allows remote attackers to execute arbitrary code. This can be achieved by passing extra parameters to the mail command via a crafted Sender property in PHPMailer. There is a potential for remote code execution in Wordpress 4.6.

Recommendations For PHPMailer versions prior to 5.2.18, update to version 5.2.18 or later to resolve the issue. For Wordpress version 4.6, update to a newer version to mitigate the risk of remote code execution.