Lucene search
PRIOn knowledge basePRION:CVE-2022-4266HistoryDec 26, 2022 - 1:15 p.m.
Cross site request forgery (csrf)
2022-12-2613:15:00
PRIOn knowledge base
www.prio-n.com
3
wordpress
csrf
plugin
security
attack
admin
users
email
nvd
The Bulk Delete Users by Email WordPress plugin through 1.2 does not have CSRF check when deleting users, which could allow attackers to make a logged in admin delete non admin users by knowing their email via a CSRF attack
| CPE | Name | Operator | Version |
|---|---|---|---|
| bulk_delete_users_by_email | le | 1.2 |
Related
nvd
nvd
CVE-2022-4266
2022-12-26 13:15:14
cve
cve
CVE-2022-4266
2022-12-26 13:15:14
cvelist
cvelist
CVE-2022-4266 Bulk Delete Users by Email <= 1.2 - User Deletion via CSRF
2022-12-26 12:28:14