CVE-2022-1605

CVE-2022-1605 affects the WordPress Email Users plugin up to version 4.8.8. The vulnerability is a CSRF flaw in the settings update, potentially allowing a logged-in administrator to change notification settings via CSRF. Affected component: Email Users plugin’s settings update mechanism (no CSRF...