Lucene search
HistoryMay 14, 2024 - 3:41 p.m.
CVE-2024-3590
wordpress
plugin
csrf
vulnerability
attackers
unwanted actions
The LetterPress WordPress plugin through 1.2.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks, such as delete arbitrary subscribers
Related
wpexploit
wpexploit
LetterPress <= 1.2.2 - Subscriber Deletion via CSRF
2024-04-18 00:00:00
cve
cve
CVE-2024-3590
2024-05-14 15:41:54
wpvulndb
wpvulndb
LetterPress <= 1.2.2 - Subscriber Deletion via CSRF
2024-04-18 00:00:00
cvelist
cvelist
CVE-2024-3590 LetterPress <= 1.2.2 - Subscriber Deletion via CSRF
2024-05-09 06:00:02
wordfence
wordfence