CVE-2017-18523

The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book...

CVE-2017-18523

The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book...

CVE-2017-18523

The CVE-2017-18523 entry applies to the WordPress eelv-newsletter plugin: versions before 4.6.1 are affected by a CSRF in the address book. The vulnerability allows CSRF-enabled actions without sufficient user interaction, potentially enabling unintended requests. Public references in connected d...