WordPress Nifty Newsletters plugin cross-site request forgery vulnerability

WordPress is a set of blogging platforms developed by the WordPress Foundation using the PHP language. WordPress Nifty Newsletters plugin 4.0.23 and earlier versions are vulnerable to cross-site request forgery, which stems from the failure of the sola_nl_wp_head function in the sola-newletters.php file to The vulnerability is caused when the sola_nl_wp_head function in the sola-newletters.php file fails to adequately verify that the request is from a trusted user, and can be exploited to spoof malicious requests to trick victims into clicking through to perform sensitive actions.