CVE-2024-13826

The Email Keep WordPress plugin (versions 1.1 and earlier ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to a lack of CSRF checks when updating plugin settings. This flaw could allow an attacker to force a logged-in administrator to perform unauthorized changes to the plugin's ...