Aller au contenu
6.5 Moyenne

CVE-2022-4266 The Bulk Delete Users by Email WordPress plugin through 1.2 does not have CSRF check when deleting users, which could…

Description

The Bulk Delete Users by Email WordPress plugin through 1.2 does not have CSRF check when deleting users, which could allow attackers to make a logged in admin delete non admin users by knowing their email via a CSRF attack

Produits et versions touchés

Produit Versions touchées Corrigé en
Bulk Delete Users by Email 1.2 premières → 1.2 Pas de correctif indiqué
Les 2 CVE de Bulk Delete Users by Email →
Suivre cette CVE