CVE-2022-4266

The Bulk Delete Users by Email WordPress plugin through 1.2 does not have CSRF check when deleting users, which could allow attackers to make a logged in admin delete non admin users by knowing their email via a CSRF attack...

CVE-2022-4266

creationtimestamp| type| source ---|---|--- 2022-12-26 16:40:40+00:00| seen| https://t.me/cibsecurity/55344 2025-04-14 13:54:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11608...

CVE-2022-4266

The Bulk Delete Users by Email WordPress plugin through 1.2 does not have CSRF check when deleting users, which could allow attackers to make a logged in admin delete non admin users by knowing their email via a CSRF attack...

CVE-2022-4266

The CVE-2022-4266 entry concerns the WordPress plugin Bulk Delete Users by Email (versions ≤ 1.2). The root cause is a missing CSRF check when deleting users, enabling a CSRF attack to force a logged-in admin to delete non-admin users by knowing their email. Documented impact is unilateral user d...