CVE-2024-13825

CVE-2024-13825 : The Email Keep WordPress plugin up to version 1.1 is affected by a Reflected XSS vulnerability where a parameter is not sanitized/escaped before being output on the page. This could be exploited against high-privilege users such as admins. The supplied connected sources confirm t...

CVE-2024-13826

The CVE-2024-13826 entry affects the Email Keep WordPress plugin up to version 1.1. Root cause: absence of CSRF protection when updating plugin settings. Impact: an attacker could exploit this CSRF vulnerability to cause a logged-in admin to change settings. The description is corroborated by mul...