CVE-2025-10014

A flaw has been found in elunez eladmin up to 2.7. This impacts the function updateUserEmail of the file /api/users/updateEmail/ of the component Email Address Handler. Executing manipulation of the argument id/email can lead to improper authorization. The attack may be performed from remote...

CVE-2023-34029

Cross-Site Request Forgery CSRF vulnerability in Prem Tiwari Disable WordPress Update Notifications and auto-update Email Notifications plugin = 2.3.3 versions...

PT-2023-24644 · WordPress · Prem Tiwari Disable Wordpress Update Notifications/Auto-Update Email Notifications

Name of the Vulnerable Software and Affected Versions: Prem Tiwari Disable WordPress Update Notifications and auto-update Email Notifications plugin versions = 2.3.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing...