Cross site request forgery (csrf)

2014-08-2614:55:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.5%

JSON

Cross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.11 for WordPress allows remote attackers to hijack the authentication of arbitrary users.

CPENameOperatorVersion
mailpoet_newsletterseq2.1.1
mailpoet_newsletterseq2.0.6
mailpoet_newsletterseq1.1.5
mailpoet_newsletterseq2.0
mailpoet_newsletterseq2.6.6
mailpoet_newsletterseq2.1.2
mailpoet_newsletterseq2.6.3
mailpoet_newsletterseq1.0.1
mailpoet_newsletterseq2.5.4
mailpoet_newsletterseq0.9.2

Name	Operator	Version
mailpoet_newsletters	eq	2.1.1
mailpoet_newsletters	eq	2.0.6
mailpoet_newsletters	eq	1.1.5
mailpoet_newsletters	eq	2.0
mailpoet_newsletters	eq	2.6.6
mailpoet_newsletters	eq	2.1.2
mailpoet_newsletters	eq	2.6.3
mailpoet_newsletters	eq	1.0.1
mailpoet_newsletters	eq	2.5.4
mailpoet_newsletters	eq	0.9.2