Newsletter Popup <= 1.2 - Subscriber Deletion via CSRF

2024-04-2500:00:00

Bob Matyas

csrf vulnerability

newsletter popup

subscriber deletion

poc display date

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The plugin does not have CSRF check when deleting subscriber, which could allow attackers to make logged in admins perform such action via a CSRF attack

Make an admin open a link where `<RID>` is a valid user:

http://example.com/wp-admin/admin.php?page=wp_newsletter_show_localrecord&action=delete&rid=<RID>