CVE-2023-1430
CVE-2023-1430 affects the FluentCRM plugin for WordPress. The vulnerability arises from using an MD5 hash without a salt to authorize unsubscription and subscription management, allowing unauthenticated attackers (with knowledge of a subscriber’s email) to unsubscribe or modify subscriptions. Aff...