CVE-2024-5167

The CVE-2024-5167 entry concerns the CM Email Registration Blacklist and Whitelist plugin for WordPress (before 1.4.9). The vulnerability stems from a lack of CSRF protection when adding or deleting items from the blacklist/whitelist, enabling a CSRF attack to cause a logged-in admin to modify bl...