Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-1603
HistoryJun 20, 2022 - 11:15 a.m.

Cross site request forgery (csrf)

2022-06-2011:15:00
PRIOn knowledge base
www.prio-n.com
4

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

The Mail Subscribe List WordPress plugin before 2.1.4 does not have CSRF check in place when deleting subscribed users, which could allow attackers to make a logged in admin perform such action and delete arbitrary users from the subscribed list

CPENameOperatorVersion
mail_subscribe_listlt2.1.4

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%