CVE-2024-3059

The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete arbitrary Campaigns via a CSRF attack...

CVE-2024-3059

The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete arbitrary Campaigns via a CSRF attack...

CVE-2024-3059

The CVE CVE-2024-3059 affects the ENL Newsletter WordPress plugin (versions ≤ 1.0.1). It reports CSRF checks missing in certain areas, enabling CSRF attackers to make logged-in admins delete arbitrary campaigns. Public details in connected docs confirm impact and affected software but do not prov...

CVE-2024-3059 ENL Newsletter <= 1.0.1 - Campaign Deletion via CSRF

The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete arbitrary Campaigns via a CSRF attack...

WordPress ENL Newsletter Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software ENL Newsletter Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-3059 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 02791c397f96 Credits Bob Matyas Required...