CVE-2024-13826

The Email Keep WordPress plugin, affecting versions through 1.1 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks when updating the plugin's settings. An attacker could exploit this to force a logged-in administrator to change these settings. W...