Lucene search
Daniel RufWPVDB-ID:0E12BA6F-A86F-4CC6-9013-8A15586098D0HistoryMay 26, 2022 - 12:00 a.m.
Mail Subscribe List < 2.1.4 - Arbitrary Subscribed User Deletion via CSRF
2022-05-2600:00:00
Daniel Ruf
wpscan.com
4
0.001 Low
EPSS
Percentile
25.9%
The plugin does not have CSRF check in place when deleting subscribed users, which could allow attackers to make a logged in admin perform such action and delete arbitrary users from the subscribed list
PoC
| CPE | Name | Operator | Version |
|---|---|---|---|
| mail-subscribe-list | lt | 2.1.4 |
Related
prion
prion
Cross site request forgery (csrf)
2022-06-20 11:15:00
nvd
nvd
CVE-2022-1603
2022-06-20 11:15:09
patchstack
patchstack
cve
cve
CVE-2022-1603
2022-06-20 11:15:09
wpexploit
wpexploit
Mail Subscribe List < 2.1.4 - Arbitrary Subscribed User Deletion via CSRF
2022-05-26 00:00:00
cnvd
cnvd
WordPress Mail Subscribe List plugin跨站请求伪造漏洞
2022-06-22 00:00:00
cvelist
cvelist