3.1
Faible
CVE-2022-4309 The Subscribe2 WordPress plugin before 10.38 does not have CSRF check when deleting users, which could allow attackers…
Description
The Subscribe2 WordPress plugin before 10.38 does not have CSRF check when deleting users, which could allow attackers to make a logged in admin delete arbitrary users by knowing their email via a CSRF attack.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Subscribe2 10.38 | premières → < 10.38 | 10.38 |