3 matches found
CVE-2024-12709 Bulk Me Now <= 2.0 - Message Deletion via CSRF
The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...
CVE-2024-12709 Bulk Me Now <= 2.0 - Message Deletion via CSRF
The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...
CVE-2024-12709
The Bulk Me Now! WordPress plugin, affecting versions 2.0 and earlier , is vulnerable to Cross-Site Request Forgery (CSRF) . The root cause is a lack of CSRF checks in certain areas, which can allow an attacker to trick a logged-in user into performing unintended actions, specifically including m...