Lucene search

K
wpvulndbDaniel RufWPVDB-ID:46B634F6-92BC-4E00-A4C0-C25135C61922
HistoryJun 20, 2022 - 12:00 a.m.

WP Opt-in <= 1.4.1 - Arbitrary Settings Update via CSRF

2022-06-2000:00:00
Daniel Ruf
wpscan.com
10
wp opt-in
csrf
arbitrary settings update
spam emails

EPSS

0.001

Percentile

25.9%

The plugin is vulnerable to CSRF which allows changed plugin settings and can be used for sending spam emails.

PoC

EPSS

0.001

Percentile

25.9%

Related for WPVDB-ID:46B634F6-92BC-4E00-A4C0-C25135C61922