Lucene search
PRIOn knowledge basePRION:CVE-2022-4309HistoryJan 16, 2023 - 4:15 p.m.
Cross site request forgery (csrf)
2023-01-1616:15:00
PRIOn knowledge base
www.prio-n.com
10
wordpress
subscribe2 plugin
csrf
attack
admin
user deletion
The Subscribe2 WordPress plugin before 10.38 does not have CSRF check when deleting users, which could allow attackers to make a logged in admin delete arbitrary users by knowing their email via a CSRF attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| subscribe2 | lt | 10.38 |
Related
cve
cve
CVE-2022-4309
2023-01-16 16:15:11
cvelist
cvelist
CVE-2022-4309 Subscribe2 < 10.38 - User Deletion via CSRF
2023-01-16 15:38:10
nvd
nvd
CVE-2022-4309
2023-01-16 16:15:11