CVE-2022-1605

The Email Users WordPress plugin through 4.8.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and change the notification settings of arbitrary users...

PT-2022-14001

Name of the Vulnerable Software and Affected Versions Email Users WordPress plugin versions prior to 4.8.9 Description The issue is related to the lack of a CSRF check when updating settings in the Email Users WordPress plugin. This could allow attackers to make a logged-in admin change settings...