Skip to content
Sign in
6.5 Medium

CVE-2022-4266 The Bulk Delete Users by Email WordPress plugin through 1.2 does not have CSRF check when deleting users, which could…

Description

The Bulk Delete Users by Email WordPress plugin through 1.2 does not have CSRF check when deleting users, which could allow attackers to make a logged in admin delete non admin users by knowing their email via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
Bulk Delete Users by Email 1.2 earliest → 1.2 No fix stated

Other CVEs of Bulk Delete Users by Email

The 2 CVEs of Bulk Delete Users by Email →
CVE-2022-4267 The Bulk Delete Users by Email WordPress plugin through 1.2 does not sanitise and escape a parameter before outputting… 6.1 Medium
Track this CVE