Lucene search

K
wpvulndbWpvulndbWPVDB-ID:B9154128-2A30-450E-ADC1-4C946CF9784F
HistorySep 23, 2022 - 12:00 a.m.

MailOptin < 1.2.50.0 - Unauthenticated Campaign Cache Deletion

2022-09-2300:00:00
wpscan.com
6

0.001 Low

EPSS

Percentile

29.0%

The plugin does not have authorisation an CSRF checks when deleting campaign cache, which could allow any unauthenticated users to delete it (either directly or via a CSRF attack)

CPENameOperatorVersion
mailoptinlt1.2.50.0

0.001 Low

EPSS

Percentile

29.0%

Related for WPVDB-ID:B9154128-2A30-450E-ADC1-4C946CF9784F