CVE-2024-13825

The Email Keep WordPress plugin (versions 1.1 and earlier ) is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to properly sanitise and escape a parameter before it is outputted back to the page. This flaw could be exploited to target high-privile...

CVE-2024-13826

The Email Keep WordPress plugin (versions 1.1 and earlier ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to a lack of CSRF checks when updating plugin settings. This flaw could allow an attacker to force a logged-in administrator to perform unauthorized changes to the plugin's ...