2 matches found
CVE-2024-13826
The Email Keep WordPress plugin through 1.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
5.4CVSS6.9AI score0.00159EPSS
SaveExploits1References1
CVE-2024-13826 Email Keep <= 1.1 - Email Deletion via CSRF
The Email Keep WordPress plugin through 1.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
0.00159EPSS
SaveExploits1References1
20