CVE-2022-4267

CVE-2022-4267 concerns the WordPress plugin Bulk Delete Users by Email (versions up to 1.2 as stated in the primary description). The vulnerability is a reflected cross-site scripting (XSS) caused by lack of proper sanitisation/escaping of a parameter that is output back into the page. Several co...

WordPress plugin Bulk Delete Users by Email has a cross-site request forgeing vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists i...

CVE-2022-4266: Undefined Security Weakness

The Bulk Delete Users by Email WordPress plugin through 1.2 does not have CSRF check when deleting users, which could allow attackers to make a logged in admin delete non admin users by knowing their email via a CSRF attack...

CVE-2022-4267: Undefined Security Weakness

The Bulk Delete Users by Email WordPress plugin through 1.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...