Cross site request forgery (csrf)

The Nifty Newsletters WordPress plugin is vulnerable to Cross-Site Request Forgery via the solanlwphead function found in the /sola-newsletters.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 4.0.23...

PT-2021-20602

Name of the Vulnerable Software and Affected Versions: Nifty Newsletters WordPress plugin versions prior to 4.0.24 Description: The issue allows attackers to inject arbitrary web scripts via Cross-Site Request Forgery, utilizing the sola nl wp head function found in the /sola-newsletters.php file...

CVE-2021-34634: Cross-Site Request Forgery (CSRF)

The Nifty Newsletters WordPress plugin is vulnerable to Cross-Site Request Forgery via the solanlwphead function found in the /sola-newsletters.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 4.0.23...