3 matches found
CVE-2024-12709 Bulk Me Now <= 2.0 - Message Deletion via CSRF
The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...
CVE-2024-12709 Bulk Me Now <= 2.0 - Message Deletion via CSRF
The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...
CVE-2024-12709
The Bulk Me Now! WordPress plugin, affecting versions 2.0 and earlier , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of sufficient CSRF checks in certain parts of the plugin, which could allow an attacker to trick authenticated users into performing uninte...