Lucene search
Lana CodesWPEX-ID:90A1976C-0348-41EA-90B4-F7A5D9306C88HistoryMay 02, 2023 - 12:00 a.m.
Newsletter Popup <= 1.2 - Record Deletion via CSRF
2023-05-0200:00:00
Lana Codes
39
wordpress
newsletter
popup
csrf
record deletion
0.002 Low
EPSS
Percentile
56.7%
The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks as the wp_newsletter_show_localrecord page is not protected with a nonce.
https://localhost/wp-admin/admin.php?page=wp_newsletter_show_localrecord&action=delete&rid=1
Related
nvd
nvd
CVE-2023-0766
2023-05-30 08:15:09
cve
cve
CVE-2023-0766
2023-05-30 08:15:09
prion
prion
Cross site request forgery (csrf)
2023-05-30 08:15:00
cvelist
cvelist
CVE-2023-0766 Newsletter Popup <= 1.2 - Record Deletion via CSRF
2023-05-30 07:49:19
wpvulndb
wpvulndb
Newsletter Popup <= 1.2 - Record Deletion via CSRF
2023-05-02 00:00:00
wordfence
wordfence